298 matches found
CVE-2022-29418: Improper Neutralization of Input During Web Page Generation
Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...
A week in security (January 10 – 16)
Last week on Malwarebytes Labs: Ransomware cyberattack forces New Mexico jail to lock down Some Android users can disable 2G now and why that is a good thing Phishers on the prowl with fake parking meter QR codes Update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one...
Night Sky: the new corporate ransomware demanding a sky high ransom
Theres a new ransomware in town—isnt there always?—and its, unsurprisingly, after corporation-sized businesses. Its called Night Sky, and it was first spotted and revealed by MalwareHunterTeam, a group on Twitter who hunts malware online, on the first day of 2022. First day of the year, and a new...
CVE-2020-21574
Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function...
culpeperwednesdaynightride.com Cross Site Scripting vulnerability OBB-2154923
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-28713
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...
UBUNTU-CVE-2020-28713
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...
CVE-2020-28713
Night Owl Smart Doorbell FW 20190505 is affected by CVE-2020-28713 due to incorrect access control in the push notification service (PNS). The web service does not authenticate requests, allowing remote attackers to send push notification events to a user’s mobile app by replaying or crafting fal...
CVE-2020-28713: Authentication Bypass by Capture-replay
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...
PT-2021-11580
Name of the Vulnerable Software and Affected Versions: Night Owl Smart Doorbell FW version 20190505 Description: The issue is related to incorrect access control in the push notification service, allowing remote users to send push notification events via an exposed PNS server. A remote attacker c...
Command Execution Vulnerability in Night God Emulator (CNVD-2021-43480)
Night God Emulator is a very useful mobile game simulation software, which allows you to play handheld games on your computer smoothly and to your heart's content. A command execution vulnerability exists in Night God Emulator, which can be exploited by attackers to gain control of the server...
Night Owl Smart Doorbell FW security vulnerability
Night Owl Smart Doorbell FW is a smart doorbell from Night Owl USA. A security vulnerability exists in Night Owl Smart Doorbell FW version 20190505 that allows a remote user to send push notification events via an exposed PNS server...
Command Execution Vulnerability in Night God Emulator of Beijing Multi-Point Online Technology Co.
Night God Emulator is a very useful mobile game simulator to play mobile games on PC. Beijing Multipoint Online Technology Co. Night God Emulator has a command execution vulnerability that can be exploited by an attacker to gain server control privileges...
Night Owl WDB-20-V2: Access Control Vulnerability
Night Owl WDB-20-V2 is a webcam from Night Owl UK. A security vulnerability exists in the NightOwl WDB-20-V2 WDB-20-V2 20190314 device that allows an unauthenticated user to obtain a snapshot from the doorbell camera via the snapshot URI...
CVE-2021-0389
In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904...
Command Execution Vulnerability in Night God Emulator
Night God Android Emulator Night God Emulator, is a new generation of Android emulator. A command execution vulnerability exists in Night God Emulator, which can be exploited by an attacker to gain control of the server...
Cybersecurity in Cyberpunk 2077: the good, the bad, and the cringeworthy
What game caused some players to experience seizures, allows you to have unauthorized sex with Keanu Reeves, features a lead character who can’t keep the contents of his pants contained, was pulled from the PlayStation Store weeks after release, and still managed to shatter sales and streaming...
A New Software Supply‑Chain Attack Targeted Millions With Spyware
Cybersecurity researchers today disclosed a new supply chain attack targeting online gamers by compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs. Dubbed "Operation NightScout" by Slovak cybersecurity firm ESET, the highly-targeted surveillance campaign...
Streaming Traffic Peaks During Biden Inauguration
Live news streaming traffic during the Biden inauguration ceremony on January 20 peaked at 12 Tbps on the Akamai Intelligent Edge Platform. The peak, which occurred as now-President Biden was taking the oath of office just before 12 PM ET, is roughly 8x higher than what we typically see for mid-d...
Streaming Traffic Peaks During Biden Inauguration
Live news streaming traffic during the Biden inauguration ceremony on January 20 peaked at 12 Tbps on the Akamai Intelligent Edge Platform. The peak, which occurred as now-President Biden was taking the oath of office just before 12 PM ET, is roughly 8x higher than what we typically see for mid-d...