RSA Wrap Up: It’s All About The People

RSA 2019 just finished and -- as always -- what a week it was. This year was a personal milestone for me, with the week culminating in my presentation with Gary Hayslip, CISO at WebRoot, titled: “Why the Role of the CISO Sucks and What We Should Do about It.” But, before we get to Friday morning ...

WordPress Plugin Diamond MultiSite Widgets SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin Diamond MultiSite Widgets. An attacker can exploit the...

Ryuk, Exploring the Human Connection

ARCHIVED STORY Ryuk, Exploring the Human Connection By John Fokker · Febraury 19, 2019 In collaboration with Bill Siegel and Alex Holdtman from Coveware At the beginning of 2019, McAfee ATR published an article describing how the hasty attribution of Ryuk ransomware to North Korea was missing the...

Ryuk, Exploring the Human Connection

ARCHIVED STORY Ryuk, Exploring the Human Connection By John Fokker · Febraury 19, 2019 In collaboration with Bill Siegel and Alex Holdtman from Coveware At the beginning of 2019, McAfee ATR published an article describing how the hasty attribution of Ryuk ransomware to North Korea was missing the...

WordPress Diamond MultiSite Widgets 1.8.2 SQL Injection

Exploit Title : WordPress Diamond MultiSite Widgets Plugins 1.8.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : amegrant.com Software Download Link : downloads.wordpress.org/plugin/diamond-multisite-widgets.1.8.2.zip...

booking.diamondhotel.com XSS vulnerability

Open Bug Bounty ID: OBB-692767 Description| Value ---|--- Affected Website:| booking.diamondhotel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

diamondcorporation.co.za XSS vulnerability

Open Bug Bounty ID: OBB-570450 Description| Value ---|--- Affected Website:| diamondcorporation.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

diamond-fo.com XSS vulnerability

Open Bug Bounty ID: OBB-293164 Description| Value ---|--- Affected Website:| diamond-fo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

diamond.co.id XSS vulnerability

Open Bug Bounty ID: OBB-283759 Description| Value ---|--- Affected Website:| diamond.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Malware exploit: Gorynch\diamond

Gorynch\diamond Type: File Upload Vulnerability Author: Xylitol Gorynych v4.2.0.257- File Upload Vulnerability Gorynych/DiamondFox v4.2.0.257 - File Upload Vulnerability File naming convention: file.log.php go to logs/dump/file.log.php file.jpg.php go to logs/scr/file.jpg.php file.LOG.php go to...

Malware exploit: Gorynch Diamond V4.2.0.257

Type: File Upload Vulnerability Author: Xylitol !DOCTYPE html html head titleGorynych v4.2.0.257- File Upload Vulnerability/title !-- Panel.zip hash: e698cf7cc57b20c02fce6de83299b75b -- /head body h1 Gorynych/DiamondFox v4.2.0.257 - File Upload Vulnerability /h1 form...

Diamond Run - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Diamond Run published at the 'play' market has multiple vulnerabilities...

Double Diamond Casino - Free! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Double Diamond Casino - Free! published at the 'play' market has multiple vulnerabilities...

Super Diamond Slots - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Super Diamond Slots published at the 'play' market has multiple vulnerabilities...

Slot Machines: MEGA DIAMOND! - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slot Machines: MEGA DIAMOND! published at the 'play' market has multiple vulnerabilities...

Slots - Black Diamond Casino - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots - Black Diamond Casino published at the 'play' market has multiple vulnerabilities...

Diamond Mine - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Diamond Mine published at the 'play' market has multiple vulnerabilities...

Diamond Dash - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Diamond Dash published at the 'play' market has multiple vulnerabilities...

Cat Diamond Adventure - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cat Diamond Adventure published at the 'play' market has multiple vulnerabilities...

swissdiamondcollection.ch XSS vulnerability

Vulnerable URL: http://www.swissdiamondcollection.ch/english/shop/password.html?email=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...