marketnews.usda.gov Cross Site Scripting vulnerability OBB-2203735

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Second SolarWinds Attack Group Breaks into USDA Payroll — Report

There had been hints that a second group of malicious actors may have exploited a SolarWinds bug to install the Supernova backdoor — notably, there was a conclusion by Microsoft back in December that this was the case. Now, sources told Reuters that there’s indeed evidence that a separate advance...

gis.apfo.usda.gov Improper Access Control vulnerability OBB-1372388

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

vsappstest04.aphis.usda.gov Improper Access Control vulnerability OBB-1316645

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

wicuat.fns.usda.gov Improper Access Control vulnerability OBB-1316633

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

augnuga.pw.usda.gov Improper Access Control vulnerability OBB-1316578

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

data.fs.usda.gov XSS vulnerability

Open Bug Bounty ID: OBB-712191 Description| Value ---|--- Affected Website:| data.fs.usda.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

supertracker.usda.gov XSS vulnerability

Open Bug Bounty ID: OBB-527307 Description| Value ---|--- Affected Website:| supertracker.usda.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

probes.pw.usda.gov XSS vulnerability

Open Bug Bounty ID: OBB-382712 Description| Value ---|--- Affected Website:| probes.pw.usda.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

srs.fs.usda.gov XSS vulnerability

Open Bug Bounty ID: OBB-374191 Description| Value ---|--- Affected Website:| srs.fs.usda.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

photogallery.nrcs.usda.gov XSS vulnerability

Vulnerable URL: https://photogallery.nrcs.usda.gov/netpub/server.np?quickfind="=catalog=Filename=PhotoGallery=results.np=240 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

wheat.pw.usda.gov XSS vulnerability

Vulnerable URL: https://wheat.pw.usda.gov/cgi-bin/GG3/sql.cgi?rs=26=50=/%27%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:37 GMT Vulnerability type:| XSS Vulnerability status:|...

srs.fs.usda.gov XSS vulnerability

Vulnerable URL: https://srs.fs.usda.gov/pubs/results.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check srs.fs.usda.gov SSL...

fsa.usda.gov XSS vulnerability

Vulnerable URL: http://www.fsa.usda.gov/Internet/FSAFile/eauth4controller.swf?csConfigFile=//nsa.is.spying-on.us/hp.xml Details: Description| Value ---|--- Patched:| Yes, at 19.09.2016 Latest check for patch:| 19.09.2016 00:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

probes.pw.usda.gov XSS vulnerability

Vulnerable URL: http://probes.pw.usda.gov/cgi-bin/batchprimer3/batchprimer3.cgi?PRIMERTYPE=%22%3E%3Caudio/onloadstart=%28confirm%28%22XSSposed%22%29%29%20src%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...