thomascook.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-184958 Security Researcher tbm Helped patch 2374 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting thomascook.com website and its...

BREAKING! Another NSA Contractor Arrested For Stealing 'Secret' Documents

Another Edward Snowden? The FBI has secretly busted another National Security Agency NSA contractor over a massive secret data theft. The United States Justice Department charged Harold Thomas Martin, 51, with theft of highly classified government material, including "source codes" developed by t...

Vulnerability in OpenSSL - Missing CRL sanity check

This issue only affects OpenSSL 1.0.2i, released on 22nd September 2016. A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception. Found by Bruce...

notes.de.thomascook.com XSS vulnerability

Vulnerable URL: https://notes.de.thomascook.com/fb-db/finance/runz.nsf/webAnmeldung?OpenForm=ES=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2016 Latest check for patch:| 19.08.2016 13:59 GMT Vulnerability type:| XSS Vulnerability...

alpha.thomascook.com XSS vulnerability

Vulnerable URL: http://alpha.thomascook.com/travel-money/buy-australian-dollars/?dbTrail==%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 20:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cruise.thomascook.com XSS vulnerability

Vulnerable URL: https://cruise.thomascook.com/emailus.rvlx?message=%3C/select%3E%3Cbody/onpageshow=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2016 Latest check for patch:| 11.10.2016 13:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

thomascook.com XSS vulnerability

Vulnerable URL: http://www.thomascook.com/tv/category/featured-destinations/canary-islands/?orderby=comment=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.08.2016 Latest check for patch:| 05.08.2016 11:42 GMT Vulnerability type:| XSS...

libgd Heap Buffer Overflow Vulnerability

libgd also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source library for dynamically creating images . A heap buffer overflow vulnerability exists in libgd, which can be exploited by an attacker to execute arbitrary code in an affecte...

Ubuntu 14.04 LTS : OpenSSH vulnerabilities (USN-2966-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2966-1 advisory. Shayan Sadigh discovered that OpenSSH incorrectly handled environment files when the UseLogin feature is enabled. A local attacker could use this issue t...

email.thomaspink.com XSS vulnerability

Vulnerable URL: https://email.thomaspink.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Thomas & Friends: Go Go Thomas - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thomas & Friends: Go Go Thomas published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travel Insight - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travel Insight published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travelguide - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travelguide published at the 'play' market has multiple vulnerabilities...

Thomas Sabo Ice Tigers - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Sabo Ice Tigers published at the 'play' market has multiple vulnerabilities...

Thomas & Friends 14 - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thomas & Friends 14 published at the 'play' market has multiple vulnerabilities...

tomcat -- multiple vulnerabilities

Mark Thomas reports: CVE-2015-5345 Apache Tomcat Directory disclosure CVE-2016-0706 Apache Tomcat Security Manager bypass CVE-2016-0714 Apache Tomcat Security Manager Bypass...

Why a War Studies PhD?

When I begin receiving multiple questions on a topic, it's a signal that I should write a blog post. Several of you have asked me about my experience as a PhD candidate in the King's College London Department of War Studies. In this post I will try to answer your questions by explaining how I got...

Secure Data Space 3.1.1-2 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 secunet Security Networks AG Security Advisory Advisory: SECURE DATA SPACE API Multiple Non-Persistent Cross-Site Scripting Vulnerabilities 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site...

Variety Jones, A Senior Adviser to ‪Silk Road‬ arrested in Thailand

The man accused of being "a senior advisor" and mentor of Ross Ulbricht, the convicted operator of the illegal drug marketplace Silk Road, has been arrested in Thailand and charged with conspiring to traffic drugs and money laundering. The US Department of Justice DoJ announced on Friday that Rog...

RXTEC RXAdmin SQL Injection Vulnerability

RXTEC RXAdmin login page from UPDATE 06 / 2012 suffers from a remote SQL injection vulnerability. RXTEC20150513 Title: SQL injection vulnerability in the RXTEC RXAdmin Login Page allows remote attackers to execute arbitrary SQL commands via several HTTP parameter. Type of vulnerability: SQL...