A week in security (June 8 – 14)

Last week on Malwarebytes Labs, we looked into nasty search hijackers that worried a lot of Chrome users; a list of considerations for MSPs when looking for an RMM platform; the complaint faced by ParetoLogic, the company that issues SpeedyPC, a product that claims to find and remove various PC...

search.babylon.com XSS vulnerability

Open Bug Bounty ID: OBB-622953 Description| Value ---|--- Affected Website:| search.babylon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.babylon.com XSS vulnerability

Vulnerable URL: http://search.babylon.com/imageres.php?iu=http://%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

dictionnaire.babylon-software.com XSS vulnerability

Open Bug Bounty ID: OBB-214731 Description| Value ---|--- Affected Website:| dictionnaire.babylon-software.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

translator.babylon-software.com XSS vulnerability

Vulnerable URL: http://translator.babylon-software.com/?trid="/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

translation.babylon-software.com XSS vulnerability

Vulnerable URL: http://translation.babylon-software.com/japanese/to-english/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

dictionary.babylon-software.com XSS vulnerability

Vulnerable URL: http://dictionary.babylon-software.com// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

thesaurus.babylon-software.com XSS vulnerability

Vulnerable URL: http://thesaurus.babylon-software.com/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

translation.babylon-software.com XSS vulnerability

Vulnerable URL: http://translation.babylon-software.com/english/to-greek// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

espanol.babylon-software.com XSS vulnerability

Vulnerable URL: http://espanol.babylon-software.com/bht/index.html?trid=%22%3E%3Cimg%20src=1%20onerror=alert'OPENBUGBOUNTY';%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

Babylon Translator Cross Site Scripting

I. VULNERABILITY ------------------------- Vulnerability Cross-Site Scripting XSS II. PROOF OF CONCEPT ------------------------- URL: 1. http://espanol.babylon-software.com/bht/index.html?trid= 2. http://traductor.babylon-software.com/ingles/a-espanol/ 3...

babylon-software.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-144856 Security Researcher tbm Helped patch 2364 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting babylon-software.com website and...

store.babylon.com XSS vulnerability

Vulnerable URL: https://store.babylon.com/failure.php?err=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2014-7702

The CVE-2014-7702 entry concerns the Android app ahtty (also known as com.crevation.babylon.ahtty) version 1.97.16. The vulnerability is that the application does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...

CVE-2010-5225

Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file. NOTE: some of these details are obtained from third party information...

CVE-2010-5225

Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file. NOTE: some of these details are obtained from third party information...

CVE-2010-5225

CVE-2010-5225 concerns an untrusted search path vulnerability in Babylon 8.1.0 r16. A Trojan BESExtension.dll placed in the current working directory can be used by a local attacker to gain privileges, demonstrated by a directory containing a .bgl file. The issue hinges on DLL search order and th...

CVE-2010-5225: Undefined Security Weakness

Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory, as demonstrated by a directory that contains a .bgl file. NOTE: some of these details are obtained from third party information...

PT-2012-1436

Name of the Vulnerable Software and Affected Versions Babylon version 8.1.0 r16 Description The issue allows local users to gain privileges via a Trojan horse BESExtension.dll file in the current working directory. This can be demonstrated by a directory that contains a .bgl file. Recommendations...