Microsoft Skype Mobile v8.x - Remote Denial of Service Vulnerability

Vulnerability Labs core team discovered a new denial of service vulnerability and rendering problem in Skype Mobile Client v8.12 and v8.13 this week. The vulnerability can be triggered by sending a special smiley (emoticon) content message remotely. The security problem can be triggered locally and remotely. The problem concerns the mobile client for Android and ios and was demonstrated by ios on Samsung device with a poc video.

The security vulnerability was reported to the microsoft corporation in february (2018-02-03) with MSRC ID 43520 by the vulnerability laboratory core research team.

Bug Bounty Program increases payments for researchers in 2018

Today in the morning the paypal inc bug bounty program updated again within one month the official bug bounty program conditions. The newst update of j.p. morgan increases the payment amounts to a new stage for participating security researchers.

PayPal Inc - Venmo Bug Bounty Program

Today in the morning paypal inc announced its newst updates of the bug bounty program. The new service is called "Venmo" and became to today official part of the bug bounty program.

For the program the official terms and process for submitting PayPal bugs apply at that point. In a email for the paypal bug bounty researchers, paypal informs about how to report in the official portal in an email delivered to the paypal bug bounty research community. To participate in the program security researchers will need to be registered on the portal, using an official PayPal account login. After submitting a bug through the portal the researcher will be able to login any time to review the bug’s status.