Boomerang Parental Control Security Vulnerability

Boomerang Parental Control is an application from Boomerang for parents to restrain their children from using electronic devices. A security vulnerability exists in the Boomerang Parental Control application prior to version 13.83 Android, which stems from the ability to use Safe Mode to...

CVE-2023-36621

CVE-2023-36621 affects Boomerang Parental Control App (Android) up to version 13.83. Multiple connected sources describe a stored XSS and privilege escalation vulnerability in versions prior to 13.83, with at least one issue fixed in 13.83 or later. SEC Consult and PacketStorm indicate the vulner...

Boomerang Parental Control App Cross Site Scripting / Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stored XSS & Privilege Escalation product: Boomerang Parental Control App vulnerable version: =13.83 only issue 1, rest not fixed CVE number: CVE-2023-36620, CVE-2023-366...

@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.1) potentially affected by CVE-2023-22491 via gatsby-transformer-remark (6.0.0)

gatsby-transformer-remark NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby-transformer-remark and may be impacted: - @boomerang-io/gatsby-theme-boomerang =1.5.0-beta.0, =1.6.1 Source cves: CVE-2023-22491 Source advisory:...

musicboomerang.com Cross Site Scripting vulnerability OBB-2847922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Boomerang - A Tool To Expose Multiple Internal Servers To Web/Cloud

Boomerang is a tool to expose multiple internal servers to web/cloud using HTTP+TCP Tunneling. The Server will expose 2 ports on the Cloud. One will be where tools like proxychains can connect over socks, another will be for the agent to connect. The agent can be executed on any internal host. Th...

Boomerang spam bombs Malwarebytes forum—not a smart move

Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies in the comment sections here or on the Malwarebytes forums. Last week, however, scammers struggled with configuring their spambots, resulting in spam bombs on the foru...

Boomerang from Instagram - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Boomerang from Instagram published at the 'play' market has multiple vulnerabilities...

Boomerang Make and Race - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Boomerang Make and Race published at the 'play' market has multiple vulnerabilities...

New attack produces quicker SHA-1 collisions

From The H Security Australian researchers have described a new and faster way of provoking collisions of the SHA-1 hash algorithm. With their method, a collision can be found using only 252 attempts. This makes practical attacks feasible and could have an impact on the medium-term use of the...