Tokyo Olympics Leveraged in Cybercrime Attack

Just before the opening of the Tokyo Olympics, we confirmed an attack that directed users from a fake TV broadcast schedule page to browser notification spam...

espndeportes.espn.com XSS vulnerability

Vulnerable URL: http://espndeportes.espn.com/sports/tvlistings/deportes/scheduleShow?showid=DC=EO%22%3E%3Cscript%3Ealert%27xssposed%27;%3C/script%3E=united%20states Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:|...

tvschedule.zap2it.com XSS vulnerability

Open Bug Bounty ID: OBB-84522 Description| Value ---|--- Affected Website:| tvschedule.zap2it.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...