77 matches found
desertplantsofavalon.com Cross Site Scripting vulnerability OBB-2759932
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
m.desertlocust-crc.org Cross Site Scripting vulnerability OBB-2529808
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Hamas-linked Hackers Targeting High-Ranking Israelis Using 'Catfish' Lures
A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an "elaborate campaign" targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations. "The campaign operators use sophisticated social...
New Wave of Cyber Attacks Target Palestine with Political Bait and Malware
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents. The intrusions are part of what Cisco Talos calls a longstanding...
desert-team.ch Cross Site Scripting vulnerability OBB-1495602
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
desertgrownfarms.com Improper Access Control vulnerability OBB-1270897
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Burning Man Tickets for $225? Yep, Too Good to Be True
Burning Man aficionados anxious to get their tickets squared away for the 2020 “experience” should beware: Fake concert organizers are offering passes in what researchers say is a very convincing and sophisticated scam effort. Burning Man, which bills itself as a “vibrant participatory metropolis...
Google Play Boots Three Malicious Apps From Marketplace Tied to APTs
Two advanced persistent threat groups managed to sneak apps onto the Google Play marketplace earlier this year. Both were designed to conduct surveillance on targets located in the Middle East region, according to Lookout security researchers. One of the groups, identified as APT-C-23 also known ...
cinematheque.fr XSS vulnerability
Vulnerable URL: http://www.cinematheque.fr/sites-documentaires/triangle/rubrique/affichage-the-desert-man.php?id=24%22/%3E%3Cscript%3Ealert%270p3nBugBoun7y%27;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability...
Desert Traffic Racer - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Desert Traffic Racer published at the 'play' market has multiple vulnerabilities...
4x4 Off-Road Desert ATV - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 4x4 Off-Road Desert ATV published at the 'play' market has multiple vulnerabilities...
Lt Gen David Deptula on Desert Storm and Islamic State
This weekend Vago Muradian interviewed Lt Gen ret David Deptula, most famous for his involvement as a key planner for the Desert Storm air campaign. I recommend watching the entire video, which is less than 8 minutes long. Three aspects caught my attention. I will share them here. First, Lt Gen...
Stuxnet was planted by Iranian double agent using memory stick
Stuxnet was planted by Iranian double agent using memory stick The Stuxnet computer worm used to sabotage Iran's nuclear program was planted by a double agent working for Israel. The agent used a booby-trapped memory stick to infect machines deep inside the Natanz nuclear facility, according to a...
Unfixed XSS vulnerability at www.desertrosephotography.com.au
Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.desertrosephotography.com.au, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007...
CVE-2004-2361
The CVE-2004-2361 issue affects the Digital Reality game engine as used in Haegemonia 1.0–1.0.7 and Desert Rats vs. Afrika Korps 1.0. A remote attacker can cause a crash (DoS) by sending a chat message with an oversized payload, triggering an out-of-bounds read. The available documents do not pro...
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...
Desert Rats vs. Afrika Korps (Haegemonia bug)
Yesterday has been released the multiplayer demo 1.18 of the game Desert Rats vs. Afrika Korps http://www.desertratsgame.com. Also this game as Haegemonia created by the same developers is vulnerable to the same server crash bug. I have updated the advisory and proof-of-concept I released ten day...