Lawsuit Alleges Disney Illegally Tracks Children Via Apps

The Walt Disney Company is fighting allegations this week that its apps fail to safeguard children’s personal information. The move follows a class action lawsuit brought against the company and four others who produce the apps. According to the complaint .PDF, Amanda Rushing and her child filed...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

GTA Fan Forum Hacked: Old vBulletin Software To Blame

Outdated vBulletin forum software is being blamed for the breach of a Grand Theft Auto fan forum called GTAGaming. It marks the second time in two days a gaming forum has been targeted by hackers and that a SQL injection vulnerability is believed to have been exploited. The fan website notified...

licensing.disney.com XSS vulnerability

Vulnerable URL: https://licensing.disney.com/Home/display.jsp?contentId=dcphomepressroompresskitspresskitusdisneyprincess=false=ko=false=0=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=null=0=null Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerabili...

registration.disneyinternational.com XSS vulnerability

Open Bug Bounty ID: OBB-146855 Description| Value ---|--- Affected Website:| registration.disneyinternational.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

Disney Crossy Road - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Disney Crossy Road published at the 'play' market has multiple vulnerabilities...

Disney Wild About Safety - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Wild About Safety published at the 'play' market has multiple vulnerabilities...

Disney Color and Play - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Color and Play published at the 'play' market has multiple vulnerabilities...

Disney Creativity Studio 2 - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Creativity Studio 2 published at the 'play' market has multiple vulnerabilities...

Disney Magic Timer by Oral-B - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disney Magic Timer by Oral-B published at the 'play' market has multiple vulnerabilities...

Disney Infinity: Toy Box 2.0 - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Disney Infinity: Toy Box 2.0 published at the 'play' market has multiple vulnerabilities...

Disney Dream Treats - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Disney Dream Treats published at the 'play' market has multiple vulnerabilities...

Disney Channel - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Disney Channel published at the 'play' market has multiple vulnerabilities...

My Disney Infinity Collection - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application My Disney Infinity Collection published at the 'play' market has multiple vulnerabilities...

disney.pl XSS vulnerability

Vulnerable URL: http://www.disney.pl/DisneyOnline/j/redirect.jsp?redirectURL=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107676 Google Pagerank| 5 VI...

disney.be XSS vulnerability

Vulnerable URL: http://www.disney.be/DisneyOnline/j/redirect.jsp?redirectURL=" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274700 Google Pagerank| 5 VI...

disney.co.za XSS vulnerability

Vulnerable URL: http://www.disney.co.za/DisneyOnline/j/redirect.jsp?redirectURL=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

disney.fr XSS vulnerability

Vulnerable URL: http://www.disney.fr/les-muppets/games/AnimalsBeatCraze/game.jsp?width=750=500=%22%27%3CGRr72%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 01.12.2016 Latest check for patch:| 01.12.2016 07:09 GMT Vulnerability type:| XS...

disneycareers.com XSS vulnerability

Vulnerable URL: http://disneycareers.com/en/videos/?x"x=1 Details: Description| Value ---|--- Patched:| Yes, at 27.10.2016 Latest check for patch:| 27.10.2016 13:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21410 Google Pagerank| 6 VIP website status:| Yes...

disneycareers.com XSS vulnerability

Vulnerable URL: http://disneycareers.com/gateway/careers-portal/gateway/?x"x=1 Details: Description| Value ---|--- Patched:| Yes, at 27.10.2016 Latest check for patch:| 27.10.2016 13:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21410 Google Pagerank| 6 VIP...