New ‘Early Bird’ Code Injection Technique Helps APT33 Evade Detection

Researchers have identified what they are calling an Early Bird code injection technique used by the Iranian group APT33 to burrow the TurnedUp malware inside infected systems while evading anti-malware tools. The Early Bird code injection technique, highlighted in a Wednesday report by Cyberbit,...

bird-food.ca XSS vulnerability

Open Bug Bounty ID: OBB-523736 Description| Value ---|--- Affected Website:| bird-food.ca Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

Epic Bird - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Epic Bird published at the 'play' market has multiple vulnerabilities...

painted-bird.com XSS vulnerability

Vulnerable URL: http://www.painted-bird.com/search.php?searchterm='"zzbutton1.x=0button1.y=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10115034 VIP website status:| No Check...

Snow Queen 2: Bird and Weasel - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Snow Queen 2: Bird and Weasel published at the 'play' market has multiple vulnerabilities...

Tap Bird 2D - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tap Bird 2D published at the 'play' market has multiple vulnerabilities...

Bubble Bird Rescue - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bubble Bird Rescue published at the 'play' market has multiple vulnerabilities...

Fly Happy Bird - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fly Happy Bird published at the 'play' market has multiple vulnerabilities...

Bird Calls, Sounds & Ringtones - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bird Calls, Sounds & Ringtones published at the 'play' market has multiple vulnerabilities...

CVE-2014-9334

Multiple cross-site request forgery CSRF vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 user or 2 password parameter in the bird-feeder page to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 user or 2 password parameter in the bird-feeder page to...

CVE-2014-9334

CVE-2014-9334 concerns the Bird Feeder WordPress plugin (version 1.2.3), which is affected by multiple CSRF and XSS vulnerabilities. The issue allows an attacker to hijack an administrator’s session by crafting requests to wp-admin/options-general.php via the bird-feeder page, abusing parameters ...

CVE-2014-9334

Multiple cross-site request forgery CSRF vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 user or 2 password parameter in the bird-feeder page to...

Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability

Document Title: =============== Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1372 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9334 CVE-ID: ======= CVE-2014-9334 Release Date:...

Bird Feeder <= 1.2.3 - CSRF & XSS

The bird-feeder WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress Bird Feeder 1.2.3 CSRF / XSS

Document Title: =============== Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1372 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9334 CVE-ID: ======= CVE-2014-9334 Release Date:...

Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability

Document Title: =============== Bird Feeder v1.2.3 WP Plugin - CSRF & XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1372 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9334 CVE-ID: ======= CVE-2014-9334 Release Date:...

WordPress Bird Feeder Plugin <= 1.2.3 - Multiple CSRF and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...

Bird Chat 1.61 - Denial of Service

No description provided by source. / Bird Chat 1.61 - Denial Of Service - Proof Of Concept Coded by: Donato Ferrante / import java.net.Socket; import java.net.InetAddress; import java.net.ConnectException; import java.net.SocketTimeoutException; import java.io.OutputStream; import...

Google and Apple app Store removing all Games with "Flappy" word in Title

After the developer of Flappy Bird pulled the gaming app from both the Apple and Google app stores, it led to the creation of dozens and dozens of Flappy Bird clones that are trying to cash in on the popularity of the original title. Also Security researchers from multiple anti-malware firms have...