BRC4-BOF-Artillery

Generic This repository includes a collection of generic BOFs I wrote over a period of time. This repository solely focuses on porting and execution, without modifying the original source for stability. While I may conduct further testing in the future, this is not officially supported. Contact...

artillery

Project Artillery has moved to https://github.com/BinaryDefense/artillery. Visit there for the latest repository...

EUVD-2021-11402

Malware in sbrugna...

Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

MAL-2025-43516 Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

CVE-2021-24490

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...

Fire-Boltt Bluetooth Smart Watch

The vulnerability of the Bluetooth smart watch technology Fire-Boltt Artillery Smart Watch lies in improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to disconnect the user from the application or expose the protected information...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

The Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 is vulnerable to a Denial of Service (DoS) due to insecure permissions in its Bluetooth Low Energy (BLE) component. The root cause involves the improper cleaning or release of resources , which could allow a malicious actor to disconnect a user fro...

Fire Boltt Artillery Smart Watch NJ-R6E has security vulnerabilities

Fire Boltt Artillery Smart Watch NJ-R6E is a smart watch from Fire Boltt. A security vulnerability exists in the Fire Boltt Artillery Smart Watch NJ-R6E-10.3 version, which stems from an insecure privilege issue contained in the low-power Bluetooth BLE component that could result in denial of...

CVE-2024-46539: Improper Access Control

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

CVE-2024-46539

Insecure permissions in the Bluetooth Low Energy BLE component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service DoS...

PT-2024-7294 · Fireboltt · Fire-Boltt Artillery Smart Watch

Name of the Vulnerable Software and Affected Versions: Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 Description: The issue is related to insecure permissions in the Bluetooth Low Energy BLE component, which can be exploited to cause a Denial of Service DoS. This may allow an attacker to disconnec...

artillery.onlineheadquarters.net Cross Site Scripting vulnerability OBB-3722716

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-24490

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...

CVE-2021-24490

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...

Cross site request forgery (csrf)

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...

CVE-2021-24490

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...

CVE-2021-24490 Email Artillery <= 4.1 - Arbitrary File Upload

The Email Artillery MASS EMAIL WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well...