seattle-theatre.com XSS vulnerability

Open Bug Bounty ID: OBB-360963 Description| Value ---|--- Affected Website:| seattle-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

DumpsterFire Toolset: Security Incidents In A Box

The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support a...

Locky Gets Updated to ‘Ykcol’, Part of Rapid-Fire Spam Campaigns

Cybercriminals behind the Locky ransomware have revamped the malware’s code three times in 30-day period and blasted out massive spam campaigns. According to researchers at Trustwave, the latest variant of Locky ransomware is called Ykcol that’s Locky spelled backwards and was part of a Sept. 19...

fire-rescue.gov.bn XSS vulnerability

Open Bug Bounty ID: OBB-303281 Description| Value ---|--- Affected Website:| fire-rescue.gov.bn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CouchPotato: CIA Hacking Tool to Remotely Spy On Video Streams in Real-Time

After disclosing CIA's strategies to hijack and manipulate webcams and microphones to corrupt or delete recordings, WikiLeaks has now published another Vault 7 leak, revealing CIA's ability to spy on video streams remotely in real-time. Dubbed 'CouchPotato,' document leaked from the CIA details h...

Stack overflow

Stack-based buffer overflow in the havokwrite function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service panic or possibly have unspecified other impact via a long string to /dev/hv...

CVE-2015-7292

Stack-based buffer overflow in the havokwrite function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service panic or possibly have unspecified other impact via a long string to /dev/hv...

CVE-2015-7292

The CVE-2015-7292 entry describes a stack-based buffer overflow in the havok_write function of drivers/staging/havok/havok.c in Amazon Fire OS prior to 2016-01-15. A long string directed to /dev/hv can cause a denial of service (panic) and may have unspecified other impact. The vulnerability affe...

CVE-2015-7292

Stack-based buffer overflow in the havokwrite function in drivers/staging/havok/havok.c in Amazon Fire OS before 2016-01-15 allows attackers to cause a denial of service panic or possibly have unspecified other impact via a long string to /dev/hv...

CVE-2016-9193

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. Affected Products: Cisco Firepower Managemen...

Cisco Firepower Threat Management Console Denial Of Service

KL-001-2016-004 : Cisco Firepower Threat Management Console Authenticated Denial of Service Title: Cisco Firepower Threat Management Console Authenticated Denial of Service Advisory ID: KL-001-2016-004 Publication Date: 2016.10.05 Publication URL:...

Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion

KL-001-2016-006 : Cisco Firepower Threat Management Console Local File Inclusion Title: Cisco Firepower Threat Management Console Local File Inclusion Advisory ID: KL-001-2016-006 Publication Date: 2016.10.05 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt 1...

Amazon Silk Information Disclosure Vulnerability

Amazon Silk is a cloud browser developed by Amazon.com for its tablet computer, the Kindle Fire. An information disclosure vulnerability exists in Amazon Silk version 49.3.1. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack and obtain sensitive information...

Fire Soft Board 2.1 Cross Site Scripting

Exploit Title: FSBFire Soft Board2 - Reflected Cross Site Scriptingindex.php Date: 2016-06-10 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://www.fire-soft-board.com/ Software Link: https://github.com/FSB/Fire-Soft-Board-2/archive/dev.zip Version: 2.1 Tested on:...

マッチに火をつけろ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application マッチに火をつけろ published at the 'play' market has multiple vulnerabilities...

Game of War - Fire Age - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Game of War - Fire Age published at the 'play' market has multiple vulnerabilities...

Jobis Fire Staion - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Jobis Fire Staion published at the 'play' market has multiple vulnerabilities...

Gocco Fire Truck Lite - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Gocco Fire Truck Lite published at the 'play' market has multiple vulnerabilities...

Planes: Fire & Rescue - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Planes: Fire & Rescue published at the 'play' market has multiple vulnerabilities...

Fire Screen - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fire Screen published at the 'play' market has multiple vulnerabilities...