jack-wolfskin.ie XSS vulnerability

Open Bug Bounty ID: OBB-687654 Description| Value ---|--- Affected Website:| jack-wolfskin.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jack-wolfskin.bg XSS vulnerability

Open Bug Bounty ID: OBB-687653 Description| Value ---|--- Affected Website:| jack-wolfskin.bg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SVScanner - Scanner Vulnerability And Massive Exploit

Is a tool for scanning and massive exploits. Our tools target several open source cms. Getting Started with Linux 1. git clone https://github.com/radenvodka/SVScanner.git 2. cd SVScanner 3. php svscanner.php Getting Started with Windows 1. Download Xampp PHP7 2. Download SVScanner :...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

Correcting the Record on vDOS Prosecutions

KrebsOnSecurity recently featured a story about a New Mexico man who stands accused of using the now-defunct vDOS attack-for-hire service to hobble the Web sites of several former employers. That piece stated that I wasn't aware of any other prosecutions related to vDOS customers, but as it happe...

jack-wolfskin.com XSS vulnerability

On the 18.10.2017 security researcher reported a XSS vulnerability affecting the jack-wolfskin.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 October, 201...

Easy RM RMVB To DVD Burner 1.8.11 Buffer Overflow

!/usr/bin/python ======================================================================================================================== Exploit Author : Touhid M.Shaikh Exploit Title : Easy RM RMVB to DVD Burner 1.8.11 - 'Enter User Name' Field Buffer Overflow SEH Date : 28-08-2017 Website :...

Easy RM RMVB to DVD Burner 1.8.11 - Local Buffer Overflow (SEH)

!/usr/bin/python ======================================================================================================================== Exploit Author : Touhid M.Shaikh Exploit Title : Easy RM RMVB to DVD Burner 1.8.11 - 'Enter User Name' Field Buffer Overflow SEH Date : 28-08-2017 Website :...

Google Nexus 9 Unauthorized Access to FIQ Debugger（CVE-2017-0510）

Nexus 9 allows unauthorized access to the FIQ debugger via its headphones jack. This allows for sensitive information theft, via malicious headphones, out of any process. Moreover it allows the adversary to reboot the device into HBOOT, which may aid in further exploitation such as accessing...

Another CEO Hacked... It's Twitter CEO Jack Dorsey!

Twitter account of another high profile has been hacked! This time, it's Twitter CEO Jack Dorsey. OurMine claimed responsibility for the hack, which was spotted after the group managed to post some benign video clips. The team also tweeted at 2:50 AM ET today saying "Hey, its OurMine,we are testi...

Samsung Android JACK - Local Privilege Escalation

Samsung Android JACK - Local Privilege Escalation Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=796 https://bugs.chromium.org/p/project-zero/issues/detail?id=795 The usermode audio subsystem for the "Samsung Android Professional Audio" is based on JACK, which appears to be...

Samsung Android JACK - Privilege Escalation

Exploit for Android platform in category local exploits Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=796 https://bugs.chromium.org/p/project-zero/issues/detail?id=795 The usermode audio subsystem for the "Samsung Android Professional Audio" is based on JACK, which appears to...

Samsung Android JACK - Local Privilege Escalation

Sources: https://bugs.chromium.org/p/project-zero/issues/detail?id=796 https://bugs.chromium.org/p/project-zero/issues/detail?id=795 The usermode audio subsystem for the "Samsung Android Professional Audio" is based on JACK, which appears to be designed for single-user usage. The common JACK...

Banking Trojan Outwits Google Play Malware Scanner

Google Play’s first line of defense against malware was circumvented by attackers who managed to sneak a malicious app called “Black Jack Free” into the official app store. The app was discovered by Lookout Security and removed by Google last week. Lookout estimates that 5,000 people downloaded t...

JACK & JONES - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application JACK & JONES published at the 'play' market has multiple vulnerabilities...

libsndfile 1.0.25 Heap Overflow Exploit

libsndfile versions 1.0.25 and below suffer from a heap overflow vulnerability. !/usr/bin/env perl Author: Marco Romano @nemux - 07 Oct 2015 PoC for libsndfile SWF/Audio play - pulseaudio - libsndfile ?? not tested - Email attachment - TCP socket connection for audio server only - File upload ex...

libsndfile 1.0.25 Heap Overflow

!/usr/bin/env perl Author: Marco Romano @nemux - 07 Oct 2015 PoC for libsndfile SWF/Audio play - pulseaudio - libsndfile ?? not tested - Email attachment - TCP socket connection for audio server only - File upload ex. server side audio file manipulation, interactive voice responder - etc...

Pligg CMS (story.php?id) 1.0.4 - SQL Injection Vulnerability

No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

clip bucket 2.6 - Multiple Vulnerabilities

No description provided by source. Exploit : Multiple Vulnerability on ClipBucket 2.6 Date : 09 January 2012 Author : YaDoY666 Website : http://yadoy666.serverisdown.org Software : Clip Bucket Open Source Video Sharing Version : 2.6 Vendor : Clip Bucket http://clip-bucket.com Vendor Response : No...

eStore 1.0.2 - SQL Injection Vulnerability

No description provided by source. ===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x W...