Zero-Day Flaws in Counter-Strike 1.6 Let Malicious Servers Hack Gamers' PCs

If you are a Counter-Strike gamer, then beware, because 39% of all existing Counter-Strike 1.6 game servers available online are malicious that have been set-up to remotely hack gamers' computers. A team of cybersecurity researchers at Dr. Web has disclosed that an attacker has been using malicio...

CVE-2018-18334

A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android Consumer versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy SOP and obtain sensitive information via crafted JavaScript code on vulnerable installations...

CVE-2018-18334

A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android Consumer versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy SOP and obtain sensitive information via crafted JavaScript code on vulnerable installations...

CVE-2018-18334

Vulnerability CVE-2018-18334 affects Trend Micro Dr. Safety for Android, Private Browser, below version 3.0.1478. The issue could allow a remote attacker to bypass Same Origin Policy (SOP) and access sensitive information via crafted JavaScript on vulnerable installations. This description is sup...

CVE-2018-18334: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android Consumer versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy SOP and obtain sensitive information via crafted JavaScript code on vulnerable installations...

PT-2019-5833

Name of the Vulnerable Software and Affected Versions Trend Micro Dr. Safety for Android versions prior to 3.0.1478 Description The issue is related to a bypass of the Same Origin Policy SOP in the Private Browser of Trend Micro Dr. Safety for Android, which could allow a remote attacker to obtai...

Across DR-810 ROM-0 Backup File Disclosure

Exploit Title: Across DR-810 ROM-0 Backup - File DisclosureSensitive Information Date: 2019-01-11 Exploit Author: SajjadBnd My Email: [email protected] Vendor Homepage: http://www.ac.i8i.ir/ Version: DR-810 Tested on: DR-810 RomPager/4.07 UPnP/1.0 + About ========== this hardware is a SIM card...

Across DR-810 ROM-0 - Backup File Disclosure

Across DR-810 ROM-0 - Backup File Disclosure Exploit Title: Across DR-810 ROM-0 Backup - File DisclosureSensitive Information Date: 2019-01-11 Exploit Author: SajjadBnd My Email: [email protected] Vendor Homepage: http://www.ac.i8i.ir/ Version: DR-810 Tested on: DR-810 RomPager/4.07 UPnP/1.0 +...

Across DR-810 ROM-0 - Backup File Disclosure

Exploit Title: Across DR-810 ROM-0 Backup - File DisclosureSensitive Information Date: 2019-01-11 Exploit Author: SajjadBnd My Email: [email protected] Vendor Homepage: http://www.ac.i8i.ir/ Version: DR-810 Tested on: DR-810 RomPager/4.07 UPnP/1.0 + About ========== this hardware is a SIM card...

CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

Spoofing

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

CVE-2018-18330

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

CVE-2018-18330

The CVE-2018-18330 entry describes an Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below. Vulnerability stems from address bar spoofing in the app’s Private Browser, potentially enabling an attacker to trick a victim into visiting a mal...

CVE-2018-18330: Undefined Security Weakness

An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app on vulnerable installations...

PT-2018-14412

Name of the Vulnerable Software and Affected Versions Trend Micro Dr. Safety for Android Consumer versions 3.0.1324 and below Description The issue allows an attacker to potentially trick a victim into visiting a malicious URL using address bar spoofing on the Private Browser of the app...

IT consultancy firm caught running ransomware decryption scam

By Waqas Ransomware has become a persistent threat to users globally but for cybercriminals, it is a lucrative business. Recently, IT security researchers at Check Point unearthed a sophisticated ransomware decryption scam in which a Russian IT consultant company has been caught scamming ransomwa...

picturesfrom.nl XSS vulnerability

Open Bug Bounty ID: OBB-699682 Description| Value ---|--- Affected Website:| picturesfrom.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dr-niederwieser.at XSS vulnerability

Open Bug Bounty ID: OBB-696231 Description| Value ---|--- Affected Website:| dr-niederwieser.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

CVE-2018-11083: BOSH accepts refresh token as access token | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using bosh-release versions prior to: v264 prior to v264.14.0 v265 prior to v265.7.0 v266 prior to v266.8.0 v267 prior to v267.2.0 Description BOSH allows refresh tokens to be used as access tokens...