SQL Injection Vulnerability in the art***.php and con***.php Modules of iCMS

iCMS is an efficient and simple content management system built with PHP and MySQL. The art.php and con.php modules of iCMS have a SQL injection vulnerability module, which can be exploited by attackers to obtain sensitive database information...

Letterlocking

Really good article on the now-lost art of letterlocking...

Several Popular Beauty Camera Apps Caught Stealing Users' Photos

Just because an app is available on Google Play Store doesn't mean that it is a legitimate app. Despite so many efforts by Google, some fake and malicious apps do sneak in and land millions of unaware users on the hunting ground of scammers and hackers. Cybersecurity firm Trend Micro uncovered at...

Multiple Vulnerabilities in Joomla FPSS Art Frontpage Slideshow Component

Joomla is an open source content management system CMS. Database disclosure, open redirection, and SQL injection vulnerabilities exist in the Joomla FPSS Art Frontpage Slideshow component. An attacker can exploit the vulnerabilities to obtain sensitive information...

Joomla FPSS Art Frontpage Slideshow 1.6.0 Database Disclose / SQL Injection

Exploit Title : Joomla FPSS Art Frontpage Slideshow Components 1.6.0 Database Disclosure / Open Redirection / SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : artetics.com Software Information Link :...

art-talant.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-719460 Description| Value ---|--- Affected Website:| art-talant.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidd...

art-galerie-depot.com XSS vulnerability

Open Bug Bounty ID: OBB-715993 Description| Value ---|--- Affected Website:| art-galerie-depot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

35C3 Day One: Security, Art and Hacking

LEIPZIG, GERMANY – Europe’s largest hacker conference kicked off Thursday marking the 35th Chaos Communication Congress. The confab is a four-day, 24/7 celebration of everything hacker – from the latest threats to cyber-inspired art installations and discussions on how technology impacts ethics,...

art-market.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-708582 Description| Value ---|--- Affected Website:| art-market.com.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

art-directory.de XSS vulnerability

Open Bug Bounty ID: OBB-707548 Description| Value ---|--- Affected Website:| art-directory.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

art-market.com.ua XSS vulnerability

Open Bug Bounty ID: OBB-706076 Description| Value ---|--- Affected Website:| art-market.com.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

hampton2013.art-and-antiques.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-704679 Description| Value ---|--- Affected Website:| hampton2013.art-and-antiques.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

LAOBANCMS Cross-Site Scripting Vulnerability

Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . LAOBANCMS 2.0 suffers from a cross-site scripting vulnerability. Attackers can use this vulnerability through admin/art.php?typeid=1 title paramet...

CVE-2018-19229

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter...

Command Injection

Overview Versions of ascii-art before 1.4.4 are vulnerable to command injection. This is exploitable when user input is passed into the argument of the ascii-art preview command. Example Proof of concept: ascii-art preview 'doom"; touch /tmp/malicious; echo "' Given that the input is passed on th...

art-spire.com XSS vulnerability

Open Bug Bounty ID: OBB-691795 Description| Value ---|--- Affected Website:| art-spire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

art-enluminure.com XSS vulnerability

Open Bug Bounty ID: OBB-684317 Description| Value ---|--- Affected Website:| art-enluminure.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

Remote Code Execution (RCE)

ascii-art is vulnerable to remote code execution. Command line arguments passed to childprocess.exec.are not sanitized, which would allow an attacker to inject and execute arbitrary shell commands...

art-galerie-shop.de XSS vulnerability

Open Bug Bounty ID: OBB-671507 Description| Value ---|--- Affected Website:| art-galerie-shop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

art-srebro.pl XSS vulnerability

Open Bug Bounty ID: OBB-671499 Description| Value ---|--- Affected Website:| art-srebro.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...