Cross-Site Request Forgery (CSRF) in babybuddy/babybuddy

✍️ Description You don't check CSRF token in following endpoint /timers/add/quick/ with PoC.html attacker able to add quick timers. 🕵️‍♂️ Proof of Concept // PoC.html history.pushState'', '', '/' 💥 Impact This vulnerability is capable of ad quick timers...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: GHSA-8QX4-R7FX-XC4V...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-8QX4-R7FX-XC4V...

Ghost hardware. Device No.2, the Boo Buddy

The “Boo Buddy” is sold as a “trigger object” with a wide range of internal functionality such as EMF, motion and temperature detection. It’s a “trigger object”, in the sense that it is designed to evoke the spirits of children, who might be drawn in by the presence of a toy. Many people have...

Hacking ghost hunters

We’ve been looking at the security of smart ghost hunting tech. The results were a bit… spooky. TL;DR We bought three devices online. One was a camera for taking photos of ghosts, another was a smart teddy bear for helping ghosts of children apparate, the last a ghost hunting tank camera: In some...

Vastal I-Tech Buddy Zone Facebook Clone SQL Injection Vulnerability

Vastal I-Tech Buddy Zone Facebook Clone is a set of scripts for online social networking sites. A SQL injection vulnerability exists in Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability can be exploited by a remote attacker by sending the 'requestid' parameter to the...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

Sql injection

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367

CVE-2018-6367 is a confirmed SQL injection in the Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability is triggered via the /chat_im/chat_window.php with the request_id parameter or via the /search_events.php with the category parameter. The NVD entry reports a CVSS v3.0 base ...

CVE-2018-6367

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

CVE-2018-6367: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...

PT-2018-17509

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9 Description A SQL Injection issue exists, allowing potential exploitation through specific parameters in certain API endpoints. The issue can be exploited via the "request id" parameter in...

Buddy Zone 2.9.9 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

Buddy Zone 2.9.9 - SQL Injection

Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...

CVE-2014-8323

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

CVE-2014-8323: Improper Input Validation

buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service segmentation fault via a response with a crafted length parameter...

buddy-ch.com XSS vulnerability

Open Bug Bounty ID: OBB-332518 Description| Value ---|--- Affected Website:| buddy-ch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kernel security and bug fix update

2.6.32-696.1.1.0.1.el6.OL6 - kernel sched/fair: Initialize throttlecount for new task-groups lazily orabug 25071015 - kernel sched/fair: Do not announce throttled next buddy in dequeuetaskfair orabug 25071015 - kernel sched/fair: Reorder cgroup creation code orabug 25071015 - kernel sched/fair:...

DEBIAN-CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...