Design/Logic Flaw

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

CVE-2020-35624

An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded...

CVE-2020-35624

CVE-2020-35624 affects the SecurePoll extension for MediaWiki up to version 1.35.1. The non-admin vote list includes a full vote timestamp, which may reveal unintended clues about how a voting process unfolded. The provided description does not specify an exploitation method, affected products be...

PT-2020-17371 · Mediawiki +1 · Mediawiki Securepoll Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki SecurePoll extension versions through 1.35.1 Description: An issue in the SecurePoll extension for MediaWiki may provide unintended clues about how a voting process unfolded due to the non-admin vote list containing a full vote...

2020 Was a Secure Election

Over at Lawfare: "2020 Is An Election Security Success Story So Far." What’s more, the voting itself was remarkably smooth. It was only a few months ago that professionals and analysts who monitor election administration were alarmed at how badly unprepared the country was for voting during a...

Crippling Cyberattacks, Disinformation Top Concerns for Election Day

What keeps researchers up at night leading up to Nov. 3 isn’t election-day winners and losers. Most cite possible attacks on local infrastructure, crippling ransomware incidents and disinformation campaigns. There are also many concerned voters this year. Election-related cybersecurity attacks ha...

US Postal Service Files Blockchain Voting Patent

The US Postal Service has filed a patent on a blockchain voting method: Abstract: A voting system can use the security of blockchain and the mail to provide a reliable voting system. A registered voter receives a computer readable code in the mail and confirms identity and confirms correct ballot...

Open Redirect Vulnerability in Joomla! (CNVD-2020-49955)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An open redirect vulnerability exists in Joomla! versions prior to 3.9.21, which...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

PT-2020-15759 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.21 Description: The issue is related to a lack of input validation in the vote feature of com content, which leads to an open redirect. Recommendations: For versions prior to 3.9.21, update to version 3.9.21 or...

Vote by Mail Isn't Perfect. But It's Essential in a Pandemic

Despite Donald Trump's invective, the spread of Covid-19 has made the expansion of absentee voting critical...

Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents

Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...

OpenAFS Denial of Service Vulnerability (CNVD-2019-43378)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . A denial of service vulnerability exists in OpenAFS. An attacker could exploit this vulnerability by making a series of VOTEDebug RPC calls to cau...

DEBIAN-CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

UBUNTU-CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

Introducing the ElectionGuard Bounty program

Today we are launching the ElectionGuard Bounty program. In May 2019, we announced the release of ElectionGuard, a free open-source SDK to make voting more secure, transparent, and accessible. ElectionGuard enables end-to-end verification of elections, open results to third-party organizations fo...

Hurdles Remain After Senate Votes To Restore Net Neutrality

The U.S. Senate this week gave the nod to restoring net neutrality regulations that would prevent ISPs from controlling access to certain websites. But roadblocks remain, even as the legislation is pushed on the fast track to a House vote: Bigwig ISPs, independent ISPs, small businesses, Democrat...

CVE-2018-7666

An issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities exist in the actions/votechannel.php channelId parameter, the ajax/commonAjax.php email parameter, and the ajax/commonAjax.php username parameter...

designsalad.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-565383 Description| Value ---|--- Affected Website:| designsalad.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...