Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still havent set up their new accounts. Experts say malicious hackers learned they could commandee...

DeFi Hack Alert: Squarespace Domains Vulnerable to DNS Hijacking

DeFi apps on Squarespace are vulnerable to a DNS hijacking attack that redirects users to malicious sites. Over…...

MAL-2024-3047 Malicious code in squarespace-abtest (npm)

--- -= Per source details. Do not edit below this line.=-...

Stripe: [Broken Access Control ] Unauthorized Linking accounts & Linked Accounts info DIsclosure

@mrasg discovered that users of an account with member permissions were improperly allowed to see activated linked accounts and connect new carts to the account. I discovered a Vulnerability that allows the user who has member privileges to connect new carts to the Taxjar account , like...

5 Themes for Product Security and Fostering Organizational Growth

In this article we would like to review what Raj Umadas, Product Security Manager at Compass, has shared during our recent webinar highlighting recurring themes that have led to impactful collaborations and organizational risk reduction. Product security ProdSec is crucial in the process of growi...

WAFW00F v1.0.0 - Detect All The Web Application Firewall!

WAFW00F identifies and fingerprints Web Application Firewall WAF products. How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of potentially...

natalidelconte.squarespace.com Open Redirect vulnerability

Vulnerable URL: http://natalidelconte.squarespace.com/process/RedirectN?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 01.12.2016 Latest check for patch:| 01.12.2016 17:55 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Ale...

Squarespace Cross Site Scripting

Exploit Title: Squarespace Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.squarespace.com/ Google Dorks: powered by squarespace site:edu or org or com or what you want Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...