PT-2025-3957 · Unknown · Code-Projects Fantasy-Cricket

Name of the Vulnerable Software and Affected Versions: code-projects Fantasy-Cricket version 1.0 Description: A critical issue has been found in the code-projects Fantasy-Cricket software. The vulnerability is a remote SQL injection in the /authenticate.php file, which can be exploited by...

CVE-2025-0564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /authenticate.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The explo...

Code-Projects Fantasy-Cricket Injection Vulnerability

Code-Projects Fantasy-Cricket is a Code-Projects open source system. An injection vulnerability exists in Code-Projects Fantasy-Cricket version 1.0, which stems from the parameter uname in the file /authenticate.php that can cause SQL injection...

play.fulltimefantasy.com Cross Site Scripting vulnerability OBB-3946368

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lobby.apexfantasyleagues.com Cross Site Scripting vulnerability OBB-3565945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fantasy.k-book.net Cross Site Scripting vulnerability OBB-3515740

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fantasy.k-book.net Cross Site Scripting vulnerability OBB-3499478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fantasy-scifi.net Cross Site Scripting vulnerability OBB-3497545

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lobby.apexfantasyleagues.com Cross Site Scripting vulnerability OBB-3430687

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-21914 · Unknown · Wade Graphic Design Fantsy

Name of the Vulnerable Software and Affected Versions: Wade Graphic Design FANTSY affected versions not specified Description: The issue is related to insufficient filtering for file type in the file update function. An authenticated remote attacker with general user privilege can exploit this to...

MAL-2023-495 Malicious code in hd_online_player_final_fantasy_vii_advent_children_co__7i1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e037ab44e25a189105adf4a37307ae03772650eada1303cf4efb1fbc0f26faf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nrlfantasystats.com Cross Site Scripting vulnerability OBB-3216307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Iran-based Agrius deploys Fantasy wiper to attack IT firms in Israel

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Iran-based Agrius group has targeted Israel and the United Arab Emirates since 2020. In the beginning, the group deployed a wiper called Apostle, disguised as ransomware, which was later modified into...

Iranian Hackers Strike Diamond Industry with Data-Wiping Malware in Supply-Chain Attack

An Iranian advanced persistent threat APT actor known as Agrius has been attributed as behind a set of data wiper attacks aimed at diamond industries in South Africa, Israel, and Hong Kong. The wiper, referred to as Fantasy by ESET, is believed to have been delivered via a supply-chain attack...

A week in security (October 10 - 16)

Last week on Malwarebytes Labs: Teen talk: What it's like to grow up online, and the role of parents: Lock and Code S03E21 White House unveils Blueprint for an AI Bill of Rights Credential stuffers take aim at Final Fantasy XIV players Meta accuses apps of stealing WhatsApp accounts Smart lights...

deco-fantasy.ro Cross Site Scripting vulnerability OBB-2990871

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-2966 Malicious code in fantasy-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ad3855b3b7c4df575505453fa0698a7dff1eaf3c124a19e6995f2f66b19b8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2965 Malicious code in fantasy-android-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cb3db34a20c520973803672a3bd3c37e25de973b52f16f86733814eb07a3810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fantasy-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ad3855b3b7c4df575505453fa0698a7dff1eaf3c124a19e6995f2f66b19b8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fantasy-android-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cb3db34a20c520973803672a3bd3c37e25de973b52f16f86733814eb07a3810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...