183 matches found
bookings.avonvalley.co.uk Cross Site Scripting vulnerability OBB-2284712
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Tennessee Valley Authority: xss reflected - pqm.tva.com
An XSS vulnerability was discovered on pqm.tva.com. This vulnerability allowed an attacker to inject malicious code into the website, potentially leading to various attacks such as stealing user information or redirecting users to malicious websites...
Tennessee Valley Authority: xss reflected - pq.tva.com
An XSS vulnerability was discovered on pq.tva.com, allowing an attacker to inject malicious code into the website. This could potentially lead to various attacks, such as stealing user cookies or redirecting users to fake websites...
Crystal Valley Farm Coop Hit with Ransomware
Crystal Valley, a Minnesota-based farm supply and grain marketing cooperative, has become the second U.S. agriculture business to be hit with a ransomware attack this week. The company released a statement about the attack on its website on Tuesday afternoon, but as of Wednesday afternoon, the si...
Tennessee Valley Authority: Rate limit missing sign-in page
Vulnerability description not provided...
JEEWMS suffers from a file upload vulnerability (CNVD-2021-46865)
jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . JEEWMS file upload vulnerability , attackers can use the vulnerability to obtain server privileges...
Weak Password Vulnerability in TRENDnet TV-IP651W
TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley. The TRENDnet TV-IP651W suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in jeewms
jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...
Windows 10 is about to get a Big Sun Valley update
By Owais Sultan Apparently, Windows 10 Sun Valley update will be one of the largest updates through which Microsoft hopes to “refresh the desktop PCs.” This is a post from HackRead.com Read the original post: Windows 10 is about to get a Big Sun Valley update...
Tennessee Valley Authority: SQL Injection on https://soa-accp.glbx.tva.gov/ via "/api/" path - VI-21-015
Summary: i've found this subdomain soa-accp.glbx.tva.gov also is vulnerable to SQLI through /api/ path Steps To Reproduce: https://soa-accp.glbx.tva.gov/api/river/observed-data/GVDA1'+%2f!50000union%2f+SELECT+HOSTNAME--+- hostname dumped...
A Place To Belong
While I've worked for Silicon Valley-based startups and even spent time in the travel tech industry, I'd sometimes feel I was just part of the system. Working each day to earn my keep, and with no bigger purpose than that...
valleytrailersales.net Cross Site Scripting vulnerability OBB-1453173
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
organic-farm.boistfortvalleyfarm.com Cross Site Scripting vulnerability OBB-1402200
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
coyotevalleyranch.amurl.bz Cross Site Scripting vulnerability OBB-1400905
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
suwanneevalleyresort.com Cross Site Scripting vulnerability OBB-1317164
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
classifieds.lehighvalleylive.com Cross Site Scripting vulnerability OBB-1297018
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
galleries.cartoonvalley.com Cross Site Scripting vulnerability OBB-1272477
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Former Uber CSO Charged With Paying ‘Hush Money’ in 2016 Breach Cover-Up
A former Uber security executive has been charged for his role in the cover-up of a massive 2016 data breach, in which attackers accessed the company’s Amazon Web Services accounts and stole data associated with 57 million passengers and drivers. The U.S. State Attorney for the Northern District ...
gunnisonvalleycalendar.com Cross Site Scripting vulnerability OBB-1201494
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sunsetvalleyorchids.com Cross Site Scripting vulnerability OBB-1192189
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...