Circle with Disney Configuration Restore Photos File Overwrite Vulnerability

Summary An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwritten. An attacker can send an HTTP request trigger this vulnerability. Tested Versions Circ...

Circle with Disney WiFi Security Downgrade Vulnerability

Summary An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one, can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a...

Wallarm to sponsor OWASP AppSec USA

If you are a SecOps or DevOps professional you can not miss the application security event of the year: AppSec USA, September 19–22nd at Disney Coronado Spring Resort, Orlando, FL Use the code: UNLM50WLLRM to register to get $50 discount. You will get great information on the new security tools a...

ohmy.disney.com XSS vulnerability

Vulnerable URL:...

Lawsuit Alleges Disney Illegally Tracks Children Via Apps

The Walt Disney Company is fighting allegations this week that its apps fail to safeguard children’s personal information. The move follows a class action lawsuit brought against the company and four others who produce the apps. According to the complaint .PDF, Amanda Rushing and her child filed...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

GTA Fan Forum Hacked: Old vBulletin Software To Blame

Outdated vBulletin forum software is being blamed for the breach of a Grand Theft Auto fan forum called GTAGaming. It marks the second time in two days a gaming forum has been targeted by hackers and that a SQL injection vulnerability is believed to have been exploited. The fan website notified...

licensing.disney.com XSS vulnerability

Vulnerable URL: https://licensing.disney.com/Home/display.jsp?contentId=dcphomepressroompresskitspresskitusdisneyprincess=false=ko=false=0=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=null=0=null Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerabili...

registration.disneyinternational.com XSS vulnerability

Open Bug Bounty ID: OBB-146855 Description| Value ---|--- Affected Website:| registration.disneyinternational.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

Disney Crossy Road - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Disney Crossy Road published at the 'play' market has multiple vulnerabilities...

Disney Wild About Safety - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Wild About Safety published at the 'play' market has multiple vulnerabilities...

Disney Color and Play - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Color and Play published at the 'play' market has multiple vulnerabilities...

Disney Creativity Studio 2 - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Creativity Studio 2 published at the 'play' market has multiple vulnerabilities...

Disney Magic Timer by Oral-B - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disney Magic Timer by Oral-B published at the 'play' market has multiple vulnerabilities...

Disney Infinity: Toy Box 2.0 - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Infinity: Toy Box 2.0 published at the 'play' market has multiple vulnerabilities...

Disney Dream Treats - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Disney Dream Treats published at the 'play' market has multiple vulnerabilities...

Disney Channel - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Disney Channel published at the 'play' market has multiple vulnerabilities...

My Disney Infinity Collection - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application My Disney Infinity Collection published at the 'play' market has multiple vulnerabilities...

disney.pl XSS vulnerability

Vulnerable URL: http://www.disney.pl/DisneyOnline/j/redirect.jsp?redirectURL=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107676 Google Pagerank| 5 VI...

disney.be XSS vulnerability

Vulnerable URL: http://www.disney.be/DisneyOnline/j/redirect.jsp?redirectURL=" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274700 Google Pagerank| 5 VI...