84 matches found
arcticblastfilter.com Cross Site Scripting vulnerability OBB-1438463
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
arcticblastfilter.com Cross Site Scripting vulnerability OBB-1396135
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
arcticblastfilter.com Cross Site Scripting vulnerability OBB-1381627
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Doomseeker Sonic Robo Blast 2 Plugin Denial of Service Vulnerability
Doomseeker is a cross-platform server browser for Doom shooter from the Doomseeker team.Sonic Robo Blast 2 SRB2 plugin is one of the game plugins. A security vulnerability exists in the SRB2 plugin in Doomseeker versions 1.1 and 1.2. A remote attacker could exploit this vulnerability to cause a...
CVE-2019-12968
A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...
CVE-2019-12968
A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...
Design/Logic Flaw
A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...
CVE-2019-12968
CVE-2019-12968 affects the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9–11) bundled with Doomseeker 1.1/1.2. Affected plugin versions fail to discard IP packets with an unnaturally long response length from an SRB2 master server, enabling a remote attacker to trigger a potential crash or denia...
CVE-2019-12968
A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...
clemcoindustries.com XSS vulnerability
Open Bug Bounty ID: OBB-458706 Description| Value ---|--- Affected Website:| clemcoindustries.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns
Cybercriminals behind the Locky ransomware have revamped the malware’s code three times in 30-day period and blasted out massive spam campaigns. According to researchers at Trustwave, the latest variant of Locky ransomware is called Ykcol that’s Locky spelled backwards and was part of a Sept. 19...
Ice Age: Arctic Blast - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ice Age: Arctic Blast published at the 'play' market has multiple vulnerabilities...
Drupal Tripal BLAST UI Module Remote Code Execution Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in the Drupal Tripal BLAST UI module, which can be exploited by an attacker to execute arbitrary code in the context of an...
Tripal BLAST UI - Highly Critical - Remote Code Execution - SA-CONTRIB-2016-054
This module enables you to run NCBI BLAST jobs on the host system. The module doesn't sufficiently validate advanced options available to users submitting BLAST jobs, thereby exposing the ability to enter a short snippet of shell code that will be executed when the BLAST job is run. This...
Fireflies: Mushroom Blast! - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Fireflies: Mushroom Blast! published at the 'play' market has multiple vulnerabilities...
Turkey Blast: Reloaded - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Turkey Blast: Reloaded published at the 'play' market has multiple vulnerabilities...
Peggle Blast - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Peggle Blast published at the 'play' market has multiple vulnerabilities...
Fruit Link Blast - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fruit Link Blast published at the 'play' market has multiple vulnerabilities...
Jelly Blast-Candy Trip - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Jelly Blast-Candy Trip published at the 'play' market has multiple vulnerabilities...
Monster Busters: Hexa Blast - WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Monster Busters: Hexa Blast published at the 'play' market has multiple vulnerabilities...