CVE-2019-12828

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via t...

CVE-2019-12828

CVE-2019-12828 affects Electronic Arts Origin prior to 10.5.39. The issue arises from improper sanitization of origin:// and origin2:// URI schemes, allowing injection of additional arguments into the Origin process and enabling remote code execution by loading a backdoored Qt plugin via the plat...

CVE-2019-11354

The client in Electronic Arts EA Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices...

Remote code execution

The client in Electronic Arts EA Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices...

CVE-2019-11354

The client in Electronic Arts EA Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices...

Digital Arts i-FILTER Code Execution Vulnerability

Digital Arts i-FILTER is a server-based Web filtering software from Digital Arts Japan. The software is mainly used to monitor Web access and protect outbound and inbound traffic. A security vulnerability exists in Digital Arts i-FILTER 9.50R05 and earlier versions. An attacker can exploit the...

Digital Arts i-FILTER Cross-Site Scripting Vulnerability

Digital Arts i-FILTER is a server-based Web filtering software from Digital Arts Japan. The software is mainly used to monitor Web access and protect outbound and inbound traffic. A cross-site scripting vulnerability exists in Digital Arts i-FILTER 9.50R05 and earlier versions. A remote attacker...

JVN#32155106: Multiple vulnerabilities in i-FILTER

i-FILTER provided by Digital Arts Inc. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2018-16180 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3 HTTP...

Man who conducted DDoS attacks on Sony, Xbox & EA pleads guilty

By Waqas Austin Thompson, a 23-year-old man from Utah has pleaded guilty to conducting DDoS attacks on gaming giants between 2013 to 2014. Among his targets were companies like EA Origin, Sony's PlayStation Network, Steam, Microsoft's Xbox, Battle.net, and League of Legends, etc. Thompson who use...

Hacker Who DDoSed Sony, EA and Steam Gaming Servers Pleads Guilty

A 23-year-old hacker from Utah pleaded guilty this week to launching a series of denial-of-service DoS attacks against multiple online services, websites, and online gaming companies between 2013 and 2014. According to a Justice Department DoJ press release, Austin Thompson , a.k.a. "DerpTroll,"...

kalamazooarts.org XSS vulnerability

Open Bug Bounty ID: OBB-677390 Description| Value ---|--- Affected Website:| kalamazooarts.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

arts-outdoors.de XSS vulnerability

Open Bug Bounty ID: OBB-663609 Description| Value ---|--- Affected Website:| arts-outdoors.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

qrcode-arts.de XSS vulnerability

Open Bug Bounty ID: OBB-611533 Description| Value ---|--- Affected Website:| qrcode-arts.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Shijiazhuang Cool Arts Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Shijiazhuang Cool Arts Network Technology Co., Ltd Cool Arts Network is committed to enterprise and public institutions website construction, e-commerce platform, one-stop network marketing, full network marketing station building and marketing promotion, domain name registration, host space and...

arlingtonarts.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-567870 Description| Value ---|--- Affected Website:| arlingtonarts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

emblems.arts.gla.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-540317 Description| Value ---|--- Affected Website:| emblems.arts.gla.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Denies Using Google Arts & Culture App to Collect Selfie Data

By Waqas Google Arts Culture App was recently introduced and its This is a post from HackRead.com Read the original post: Google Denies Using Google Arts Culture App to Collect Selfie Data...

fine-arts-museum.be XSS vulnerability

On the 26.12.2017 security researcher reported a XSS vulnerability affecting the fine-arts-museum.be website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 26 December,...

rockportusa.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-399515 Description| Value ---|--- Affected Website:| rockportusa.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

alleganyartscouncil.org XSS vulnerability

Open Bug Bounty ID: OBB-388951 Description| Value ---|--- Affected Website:| alleganyartscouncil.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...