Command injection

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439

CVE-2010-3439 affects alien-arena 7.33; multiple connected records describe a DoS by sending invalid parameters to the download command that crashes the server. Some sources additionally classify related entries as command injection, but the core CVE detail here is the DoS via the download parame...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

CVE-2010-3439: Improper Input Validation

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

PT-2019-6561

Name of the Vulnerable Software and Affected Versions alien-arena version 7.33 Description The issue allows for a DoS condition by crashing the server in alien-arena. This can be achieved by supplying various invalid parameters to the download command. Recommendations For alien-arena version 7.33...

CVE-2010-3439

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command...

FIN7 Linked to Escalating Active Exploits for Microsoft SharePoint Bug

A recently patched, high-severity vulnerability in Microsoft SharePoint CVE-2019-0604 that allows remote code-execution is being increasingly exploited in the wild, according to researchers – possibly by the FIN7 group, among others. According to the Microsoft’s advisory, the vulnerability which...

alien-egg-mutation.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-645468 Description| Value ---|--- Affected Website:| alien-egg-mutation.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Two NSA Algorithms Rejected by the ISO

The ISO has rejected two symmetric encryption algorithms: SIMON and SPECK. These algorithms were both designed by the NSA and made public in 2013. They are optimized for small and low-cost processors like IoT devices. The risk of using NSA-designed ciphers, of course, is that they include...

A week in security (February 12 – February 18)

Last week on Malwarebytes Labs, we looked at a huge Android cryptomining campaign, malicious apps on Google Play, and some Apple scams doing the rounds. We also explored the world of healthcare security, and dived into the land of scammy Valentine's Day tricks and cheats. Other news Thought the...

3dalienworlds.com XSS vulnerability

Open Bug Bounty ID: OBB-407895 Description| Value ---|--- Affected Website:| 3dalienworlds.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download

import requests import string import random from urlparse import urlparse print "---------------------------------------------------------------------" print "Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir...

Alien Creeps TD - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Alien Creeps TD published at the 'play' market has multiple vulnerabilities...

Alien Simulator - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Alien Simulator published at the 'play' market has multiple vulnerabilities...

Alien Swarm - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Alien Swarm published at the 'play' market has multiple vulnerabilities...

Alien chat - video call - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Alien chat - video call published at the 'play' market has multiple vulnerabilities...

saga-alien-galaxie.com XSS vulnerability

Vulnerable URL: http://www.saga-alien-galaxie.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2896023 Google Pagerank| 2 VIP website...

Meet World's Fastest Wi-Fi Router (Looks Like an Alien)

In above picture, Have you noticed those numerous crazy spikes? The Device looks like an Alien artifact, which is actually the World's fastest wireless Wi-Fi router for the Game of Thrones generation. Unveiled at IFA 2015, Asus has launched its uniquely designed RT-AC5300 Wi-Fi router, which they...

Design/Logic Flaw

The Alien War Survivors aka com.ly.a13.gp application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...