East Japan Railway JR East Japan train operation information push notification App for Android Access Control Error Vulnerability

East Japan Railway JR East Japan train operation information push notification App for Android is an Android-based train operation information push notification app from East Japan Railway. Push Notification App for Android is an Android-based train operation information push notification app for...

Compromising vital infrastructure: transport and logistics

Back when I was a dispatcher for a courier and trucking company, we used to joke that it only took a few strategically-placed accidents to cause a traffic jam that could completely stop circulation around the city of Rotterdam. Rotterdam is one of the major ports in the world and consequently,...

Cheating in Bird Racing

I've previously written about people cheating in marathon racing by driving -- or otherwise getting near the end of the race by faster means than running. In China, two people were convicted of cheating in a pigeon race: The essence of the plan involved training the pigeons to believe they had tw...

Denmark’s largest train operator hit by service crippling DDoS attack

By Waqas Another day, another DDoS attack causing passengers a great deal This is a post from HackRead.com Read the original post: Denmark's largest train operator hit by service crippling DDoS attack...

le-train-bleu.com XSS vulnerability

Open Bug Bounty ID: OBB-567444 Description| Value ---|--- Affected Website:| le-train-bleu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hawaii.train.org XSS vulnerability

Open Bug Bounty ID: OBB-550556 Description| Value ---|--- Affected Website:| hawaii.train.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Cisco NX-OS System Software Management Interface Denial of Service Vulnerability

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

my.cashtrain.com.au XSS vulnerability

Open Bug Bounty ID: OBB-411610 Description| Value ---|--- Affected Website:| my.cashtrain.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

A week in security (October 9 – October 15)

Last week on the Labs blog, we talked about GDPR as part of our series in the National Cyber Security Awareness Month NCSAM. We also discussed a new method for phishing Apple ID passwords and the possible ramifications. We analyzed the malvertising chain due to a script that was found on popular...

DDoS attacks on Sweden’ Transport Agencies Delay Train Service

By Waqas The official website of Transportstyrelsen, Swedens Transport Agency STA came under This is a post from HackRead.com Read the original post: DDoS attacks on Sweden Transport Agencies Delay Train Service...

trainview.septa.org XSS vulnerability

Vulnerable URL: http://trainview.septa.org/trainschedule.php?trainnum=1"...

adidas train & run - Dangerous filesystem permissions, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application adidas train & run published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Coalfire goes to Washington!

Our CEO Larry Jones visited The White House Thursday morning to join with First Lady Michelle Obama and Dr. Biden in the celebration of the Joining Forces initiatives fifth-year anniversary and announce Coalfires pledge to hire and train veterans and military spouses...

脱出ゲーム　寝台列車 - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application 脱出ゲーム 寝台列車 published at the 'play' market has multiple vulnerabilities...

Train Byunbyun [Free] - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Train Byunbyun Free published at the 'play' market has multiple vulnerabilities...

Train simsim[Free] - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Train simsimFree published at the 'play' market has multiple vulnerabilities...

Safari Train for Toddlers - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Safari Train for Toddlers published at the 'play' market has multiple vulnerabilities...

train cancan[Free] - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application train cancanFree published at the 'play' market has multiple vulnerabilities...

Game Train for Kids - Free - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Game Train for Kids - Free published at the 'play' market has multiple vulnerabilities...