QR code vulnerability allows attackers to hijack branded domains

Security researcher Farzan Karimi discovered that QR Tiger's "Own Short Domain" feature does not adequately verify domain ownership when a custom domain is added.