A week in security (August 13 – August 19)

Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...

booking.florencehotelpittipalacealpontevecchio.com XSS vulnerability

Open Bug Bounty ID: OBB-594312 Description| Value ---|--- Affected Website:| booking.florencehotelpittipalacealpontevecchio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

treebo.com XSS vulnerability

Open Bug Bounty ID: OBB-452768 Description| Value ---|--- Affected Website:| treebo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ZeroNights 2017: back to the cyber 80s

Last Friday, 17th of November, I attended the ZeroNights 2017 conference in Moscow. And it was pretty awesome. Thanks to the organizers! Here I would like to share some of my impressions. First of all, I want to say that two main Moscow events for information security practitioners, PHDays and...

prestonpalace.nl XSS vulnerability

Vulnerable URL: https://www.prestonpalace.nl/search/All/"?zoekresultaat=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 847854 VIP website status:| No Check prestonpalace.nl SSL...

Princess Palace Salon Makeover - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Princess Palace Salon Makeover published at the 'play' market has multiple vulnerabilities...

Skat-Palace - Dangerous filesystem permissions, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Skat-Palace published at the 'play' market has multiple vulnerabilities...

Singapore police arrested six men for allegedly hacking Prime Minister and President websites

A Singaporean hacker calling himself the "The Messiah" was arrested in Kuala Lumpur last Monday for hacking into a Singaporean government website over two weeks ago - from a Kuala Lumpur apartment. James Raj 35 charged with hacking of Ang Mo Kio town council website and posting a symbol associate...

DefCamp 2013 - International Hacking and Information Security Conference in Romania

The Fourth Edition of an International Information Security Conference hosted in Romania , The DefCamp 2013 is now open for Call for Papers. Over 300 Security experts, Researchers, and Enthusiasts from Romania and neighboring countries are expected to take part in the event in Bucharest, at the...

Threat Outbreak Alert: Fake Online Gambling Offer Email Messages on September 9, 2014

Medium Alert ID: 27647 First Published: 2012 December 14 15:33 GMT Last Updated: 2014 September 10 12:57 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bonus offers from the Roxy Palace Casino for the recipient. The tex...

Nicolas Sarkozy's official Elysee Palace website Hacked for 'Get Him Out' Game

Nicolas Sarkozy 's official Elysee Palace website Hacked for 'Get Him Out ' Game Hackers have attacked Nicolas Sarkozy's official Elysee Palace website to create a game video game called 'Get Him Out '. Under the formal banner introducing the site, a cartoon image of the French president was...

Nicolas Sarkozy's official Elysee Palace website Hacked for 'Get Him Out' Game

Nicolas Sarkozy's official Elysee Palace website Hacked for 'Get Him Out' Game Hackers have attacked Nicolas Sarkozy's official Elysee Palace website to create a game video game called 'Get Him Out'. Under the formal banner introducing the site, a cartoon image of the French president was picture...

CVE-2004-0262

Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string...

CVE-2004-0262

CVE-2004-0262 affects The Palace 3.5 and earlier client. The vulnerability is a stack-based buffer overflow in the handling of palace:// URLs with an excessively long server address string, enabling remote code execution. Documents confirm the affected component (The Palace client), the vulnerabi...

Palace buffer overflow

Buffer overflow on parsing palace:// URL...

The Palace 3.x (Client) Stack Overflow Vulnerability

The Palace 3.x Client Stack Overflow Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : The Palace 3.5 Client Version : 3.5 and below Vendor : 'Copyright © 1996-2000 Communities.com' Vendor Url : http://www.thepalace.com/ Vulnerability: Bug Type : Stack-based Buffer Overflow...

CVE-1999-0343

The CVE-1999-0343 entry concerns the Palace client vulnerability where a malicious Palace server can force a client to execute arbitrary programs. Affected component: Palace (client behavior). Root cause: exploitation by the server could lead to arbitrary code execution on the client. Impact is d...

CVE-1999-0343

A malicious Palace server can force a client to execute arbitrary programs...

CVE-1999-0343

A malicious Palace server can force a client to execute arbitrary programs...

PT-1998-1082 · Palace · Palace

Name of the Vulnerable Software and Affected Versions: Palace affected versions not specified Description: A malicious server can force a client to execute arbitrary programs. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...