CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

EUVD-2009-2727

Malware in sbrugna...

EUVD-2018-4984

Malware in sbrugna...

jester-entertainment.com Cross Site Scripting vulnerability OBB-3912142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

Cross site request forgery (csrf)

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

PT-2024-13952 · Jester · Jester

Name of the Vulnerable Software and Affected Versions: Jester versions 0.6.0 and earlier Description: An issue in Jester allows a remote attacker to execute arbitrary code via a crafted request. This enables the attacker to send a maliciously crafted request, potentially leading to arbitrary code...

CVE-2023-50693

The CVE-2023-50693 issue affects Jester versions 0.6.0 and earlier. The vulnerability arises from a crafted request that an attacker can send remotely, with the potential to cause arbitrary code execution per multiple sources (e.g., PT-2024-13952 and CNNVD/CVE records). Documented impacts include...

Jester Security Vulnerabilities

Jester is a web framework by Dominik Picheta, an individual developer in the UK. A security vulnerability exists in Jester v.0.6.0 and earlier versions that could allow a remote attacker to execute arbitrary code via a crafted request...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

CVE-2023-50693

An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...

jesterparkgolf.com Cross Site Scripting vulnerability OBB-3542124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Eternity Threat group is actively evolving its malware arsenal

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Eternity threat group also known as Eternity Team or Eternity Project, a Russian "Jester Group"-affiliated threat group, has been active since at least January 2022. Eternity uses a...

A week in security (May 9 – 15)

Last week on Malwarebytes Labs: How to spot the signs of a virtual kidnap scam Virtual credit cards coming to Chrome: What you need to know Clearview AI banned from selling facial recognition data in the US Cyberattacks on SATCOM networks attributed to Russian threat actors F5 BIG-IP vulnerabilit...

Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families

Cybersecurity researchers have dissected the inner workings of an information-stealing malware called Saintstealer that's designed to siphon credentials and system information. "After execution, the stealer extracts username, passwords, credit card details, etc.," Cyble researchers said in an...

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware

The Computer Emergency Response Team of Ukraine CERT-UA has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems. The mass email campaign carries the subject line "chemical attack" and contains a link to a macro-laced Microsoft Excel...

Directory traversal

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...