D-Link DIR-842 telnetd authentication anti-blast protection mechanism bypass vulnerability

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

Apple Outlines 2021 Security, Privacy Roadmap

Click to Register Apple released its 2021 Platform Security guide, Thursday, outlining its current and year-ahead agenda for its device hardware, software and silicon security. This year’s 192-page report is beefed-up, compared to past reports, with a wealth of new insights into how Apple is...

arcticblastfilter.com Cross Site Scripting vulnerability OBB-1438463

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

arcticblastfilter.com Cross Site Scripting vulnerability OBB-1396135

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

arcticblastfilter.com Cross Site Scripting vulnerability OBB-1381627

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Doomseeker Sonic Robo Blast 2 Plugin Denial of Service Vulnerability

Doomseeker is a cross-platform server browser for Doom shooter from the Doomseeker team.Sonic Robo Blast 2 SRB2 plugin is one of the game plugins. A security vulnerability exists in the SRB2 plugin in Doomseeker versions 1.1 and 1.2. A remote attacker could exploit this vulnerability to cause a...

CVE-2019-12968

A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...

CVE-2019-12968

A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...

Design/Logic Flaw

A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...

CVE-2019-12968

CVE-2019-12968 affects the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9–11) bundled with Doomseeker 1.1/1.2. Affected plugin versions fail to discard IP packets with an unnaturally long response length from an SRB2 master server, enabling a remote attacker to trigger a potential crash or denia...

CVE-2019-12968

A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...

CVE-2019-12968: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in the Sonic Robo Blast 2 SRB2 plugin EPVersions 9 to 11 inclusive distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to...

clemcoindustries.com XSS vulnerability

Open Bug Bounty ID: OBB-458706 Description| Value ---|--- Affected Website:| clemcoindustries.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns

Cybercriminals behind the Locky ransomware have revamped the malware’s code three times in 30-day period and blasted out massive spam campaigns. According to researchers at Trustwave, the latest variant of Locky ransomware is called Ykcol that’s Locky spelled backwards and was part of a Sept. 19...

Ice Age: Arctic Blast - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ice Age: Arctic Blast published at the 'play' market has multiple vulnerabilities...

Drupal Tripal BLAST UI Module Remote Code Execution Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in the Drupal Tripal BLAST UI module, which can be exploited by an attacker to execute arbitrary code in the context of an...

Tripal BLAST UI - Highly Critical - Remote Code Execution - SA-CONTRIB-2016-054

This module enables you to run NCBI BLAST jobs on the host system. The module doesn't sufficiently validate advanced options available to users submitting BLAST jobs, thereby exposing the ability to enter a short snippet of shell code that will be executed when the BLAST job is run. This...

Fireflies: Mushroom Blast! - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Fireflies: Mushroom Blast! published at the 'play' market has multiple vulnerabilities...

Turkey Blast: Reloaded - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Turkey Blast: Reloaded published at the 'play' market has multiple vulnerabilities...

Peggle Blast - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Peggle Blast published at the 'play' market has multiple vulnerabilities...