Meetup Critical Flaws Allow 'Group' Takeover, Payment Theft

A popular online social service, Meetup, has fixed several critical flaws in its website. If exploited, the flaws could have enabled attackers to hijack any Meetup “group,” access the group’s member details and even redirect Meetup payments to an attacker-owned PayPal account. Meetup is a service...

Black Hat USA 2020 Preview: Election Security, COVID Disinformation and More

Despite COVID-19 pushing the Black Hat USA 2020 conference to go virtual for the first time, you can expect a steady stream of new security research, threat intel and an impressive lineup of high-profile speakers. This year’s conference kicks off with Matt Blaze, McDevitt Chair in Computer Scienc...

Black Hat 2020: See you in the Cloud!

It hardly feels like summer without the annual trip to Las Vegas for Black Hat USA. With this year’s event being totally cloud based, we won’t have the chance to catch up with security researchers, industry partners, and customers in person, an opportunity we look forward to every year. We’ll sti...

TikTok is being discouraged and the app may be banned

In recent news retail giant Amazon sent a memo to employees telling them to delete the popular social media app TikTok from their phones. In the memo it stated that the app would pose a security risk without going into details. Later the memo was withdrawn without an explanation except that it wa...

Apple Security Research Device Program Draws Mixed Reactions

Apple’s long anticipated Security Research Device program has launched, giving select security researchers access to testable iPhones that will make it easier for them to find iOS vulnerabilities. The program offers security researchers specially configured iPhones with shell access, and special...

'Lamphone' Hack Uses Lightbulb Vibrations to Eavesdrop on Homes

Researchers have discovered a novel way to spy on conversations that are happening in houses from almost a hundred feet away. The hack stems simply from a lightbulb hanging in the home. The hack, dubbed “lamphone,” is performed by analyzing the tiny vibrations of a hanging lightbulb, which are...

fiat-500-usa-forum-archives.965414.n3.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184656 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Black Hat USA, DEF CON 28 Go Virtual

Cybersecurity conferences Black Hat USA and DEF CON 28 will not be held in person this year due to the coronavirus pandemic. The conferences will both instead be transformed into completely virtualized events. Both back-to-back annual conferences were set to take place in Las Vegas this year; Bla...

usa-co.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1153359 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting usa-co.com website an...

usa-empresas.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1153358 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting usa-empresas.com...

klett-usa.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1151668 Security Researcher Manojkhd Helped patch 44 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting klett-usa.com website and its users. Following...

Cross-site Request Forgery Vulnerability in Multiple NETGEAR Products (CNVD-2021-59156)

NETGEAR JNR1010 and others are a wireless router from NETGEAR USA. A cross-site request forgery vulnerability exists in multiple NETGEAR products. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use the...

Input Validation Error Vulnerability in Multiple NETGEAR Products (CNVD-2021-61050)

The NETGEAR R7800, among others, is a wireless router from NETGEAR. A security vulnerability exists in multiple NETGEAR products. An attacker could exploit the vulnerability to cause a denial of service...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61060)

NETGEAR D8500 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-63381)

NETGEAR EX7000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67656)

NETGEAR R9000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-67658)

NETGEAR EX7000 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in...

Buffer Overflow Vulnerability in Multiple NETGEAR Products (CNVD-2021-61056)

NETGEAR R8900 and others are a wireless router from NETGEAR USA. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorre...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-63773)

The NETGEAR R8900, among others, is a wireless router from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in an...

diamondcleaningusa.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1139694 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting diamondcleaningusa.com...