Two Romanians Charged With Hacking Police CCTV Cameras Before Trump Inauguration

Remember how some cybercriminals shut down most of Washington D.C. police's security cameras for four days ahead of President Donald Trump's inauguration earlier this year? Just a few days after the incident, British authorities arrested two people in the United Kingdom, identified as a British m...

commerce.washingtonpost.com XSS vulnerability

Vulnerable URL: http://commerce.washingtonpost.com/cgi-bin/WPclass/shopping/shopSearchUsed?VERTICAL=merchandise=284=%22--%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Eoffice%20furniture Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability...

washingtonpost.loveaccess.com XSS vulnerability

Open Bug Bounty ID: OBB-453460 Description| Value ---|--- Affected Website:| washingtonpost.loveaccess.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

co.washington.or.us XSS vulnerability

Open Bug Bounty ID: OBB-447320 Description| Value ---|--- Affected Website:| co.washington.or.us Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

new.washingtoncity.org XSS vulnerability

Open Bug Bounty ID: OBB-443557 Description| Value ---|--- Affected Website:| new.washingtoncity.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

execustay.com XSS vulnerability

Open Bug Bounty ID: OBB-369633 Description| Value ---|--- Affected Website:| execustay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

October 21, 2017 – Morning Cyber Coffee Headlines – “British Parliament” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 21, 2017 - Headlines Carbon Black in the News: Not good: Ransomware is...

How to Minimize Leaking

I am hopeful that President Trump will not block release of the remaining classified documents addressing the 1963 assassination of President John F. Kennedy. I grew up a Roman Catholic in Massachusetts, so President Kennedy always fascinated me. The 1991 Oliver Stone movie JFK fueled several yea...

msntravelnursing.com XSS vulnerability

Vulnerable URL: https://www.msntravelnursing.com/apply-travel-nurse-jobs?brand=MSN%20TRAVEL=null=DC=RN%20%20ICU%20%20%20%20Job%20in%20WASHINGTON%20%20%20%20%20%20%20%20%20%20,DC=TRAVEL=null=1550417'%22%26%25prompt/XSSPOSED/...

washington.thedelimagazine.com XSS vulnerability

Vulnerable URL: http://washington.thedelimagazine.com/poll/poll.php?category=13'"13 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline...

depts.washington.edu XSS vulnerability

Vulnerable URL: https://depts.washington.edu/wagis/projects/parcels/producers/qaqc/summary.php?nid=168"';--=430 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Speakers and Mics hacked to turn Music Into Surveillance Tool

By Waqas University of Washington’s Paul G. Allen School of Computer Science This is a post from HackRead.com Read the original post: Speakers and Mics hacked to turn Music Into Surveillance Tool...

dahp.wa.gov XSS vulnerability

Vulnerable URL: http://www.dahp.wa.gov/learn-and-research/architect-biographies/clifford-b-dobson!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS...

Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622

CVSS v3 7.2 ATTENTION: Remotely exploitable/Low skill level to exploit. Vendor: Schweitzer Engineering Laboratories, Inc. SEL Equipment: SEL-3620, SEL-3622 Vulnerability: Improper Access Control AFFECTED PRODUCTS The following versions of SEL-3620 and SEL-3622, an Ethernet Security Gateway, are...

June 23, 2017 – Morning Cyber Coffee Headlines – “Grizzly Bear” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! June 23, 2017 - Headlines Carbon Black in the News: Top 10 Endpoint Detection a...

depts.washington.edu XSS vulnerability

Vulnerable URL: https://depts.washington.edu/vehfire/flashDetector.swf?flashContentURL=javascript:alert'openbugbounty'// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

AWS Public Sector Summit 2017: Cloud Super Powers and Security

Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...

menu.labmed.washington.edu XSS vulnerability

Open Bug Bounty ID: OBB-246042 Description| Value ---|--- Affected Website:| menu.labmed.washington.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Researchers Use Ridesharing Cars to Sniff Out a Secret Spying Tool

University of Washington researchers put sensors in 15 ridesharing cars, and uncovered new evidence of how stingrays are being used and how to detect them. The post Researchers Use Ridesharing Cars to Sniff Out a Secret Spying Tool appeared first on WIRED...

washington.edu XSS vulnerability

Vulnerable URL: https://www.washington.edu/search%22'--!%3E%3CHtml%20Onmouseenter=confirm%60OPENBUGBOUNTY%60%20%3C!--//%3E// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1535 VIP website status:| Yes Coordinat...