DEF CON 2018: Apple 0-Day (Re)Opens Door to ‘Synthetic’ Mouse-Click Attack

LAS VEGAS – By tweaking just two lines of code, a researcher stumbled on an Apple zero-day that could allow a local attacker to virtually “click” a security prompt and thus load a kernel extension on systems running Apple’s latest High Sierra operating system. Kernel access on a Mac gives an...

transfermarkt.nl XSS vulnerability

Open Bug Bounty ID: OBB-663279 Description| Value ---|--- Affected Website:| transfermarkt.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

filmyprovsechny.cz XSS vulnerability

Open Bug Bounty ID: OBB-660653 Description| Value ---|--- Affected Website:| filmyprovsechny.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lesbridgets.com XSS vulnerability

Open Bug Bounty ID: OBB-659382 Description| Value ---|--- Affected Website:| lesbridgets.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seemallorca.com XSS vulnerability

Open Bug Bounty ID: OBB-657714 Description| Value ---|--- Affected Website:| seemallorca.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

linuxmint.com XSS vulnerability

Open Bug Bounty ID: OBB-657204 Description| Value ---|--- Affected Website:| linuxmint.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Allok Fast AVI MPEG Splitter 1.2 - Buffer Overflow (PoC)

Exploit Title: Allok Fast AVI MPEG Splitter 1.2 SEH Overwrite POC Vulnerability Type: SEH Overwrite POC Discovery by: Shubham Singh Known As: Spirited Wolf Twitter: @Pwsecspirit Discovey Date: 2018-08-01 Software Link: http://www.alloksoft.com/fastsplitter.htm Tested Version: 1.2 Tested on OS:...

chromium-browser: Permissions bypass in extension installation

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page...

bohemia.com.au XSS vulnerability

Open Bug Bounty ID: OBB-656141 Description| Value ---|--- Affected Website:| bohemia.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chicagomotorcars.com XSS vulnerability

Open Bug Bounty ID: OBB-655479 Description| Value ---|--- Affected Website:| chicagomotorcars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gurrumul.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652947 Description| Value ---|--- Affected Website:| gurrumul.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

henridikongue.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652941 Description| Value ---|--- Affected Website:| henridikongue.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

didirri.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652400 Description| Value ---|--- Affected Website:| didirri.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fashawn.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652327 Description| Value ---|--- Affected Website:| fashawn.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chillhop.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652323 Description| Value ---|--- Affected Website:| chillhop.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

88rising.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652200 Description| Value ---|--- Affected Website:| 88rising.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ncs.lnk.to XSS vulnerability

Open Bug Bounty ID: OBB-652107 Description| Value ---|--- Affected Website:| ncs.lnk.to Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

skybrookgolf.com XSS vulnerability

Open Bug Bounty ID: OBB-651421 Description| Value ---|--- Affected Website:| skybrookgolf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hal.archives-ouvertes.fr XSS vulnerability

Open Bug Bounty ID: OBB-649784 Description| Value ---|--- Affected Website:| hal.archives-ouvertes.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lemniscaat.nl XSS vulnerability

Open Bug Bounty ID: OBB-647610 Description| Value ---|--- Affected Website:| lemniscaat.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...