Friday Squid Blogging: New Tool for Grabbing Squid and other Fragile Sea Creatures

Interesting video of a robot grabber that's delicate enough to capture squid and even jellyfish in the ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Ocean CMS V6.61 Arbitrary File Deletion Vulnerability

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. . Ocean CMS V6.61 exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Smaller Nation State Attacks: A Growing Cyber Menace

Last year, a Qatari state media website was compromised and defaced with false reports of the Emir of that country praising Iran and Hamas. The fake content was blasted on social media and amplified through bots, eventually provoking a regional boycott that persists today. Andrea Little Limbago...

PwnAdventure3 - Game Open-World MMORPG Intentionally Vulnerable To Hacks

Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more are all one client change or network proxy away. Are you...

SQL Injection Vulnerability in Ocean CMS

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. Ocean CMS is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

ocean-editions.fr XSS vulnerability

Open Bug Bounty ID: OBB-623324 Description| Value ---|--- Affected Website:| ocean-editions.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

rentals.holidayoc.com XSS vulnerability

Open Bug Bounty ID: OBB-578130 Description| Value ---|--- Affected Website:| rentals.holidayoc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

realestate.ocean.co.th Open Redirect vulnerability

Open Bug Bounty ID: OBB-562180 Description| Value ---|--- Affected Website:| realestate.ocean.co.th Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ocean-tec.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-526598 Description| Value ---|--- Affected Website:| ocean-tec.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

File Inclusion Vulnerability in Ocean CMS V6.57 cache.inc.php file

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A file inclusion vulnerability exists in the ocean CMS V6.57 cache.inc.php file. The vulnerability is due to the background modification of the configuration file at the user input is not filtered, the...

SQL injection vulnerability in newsbig.asp page of website construction system of Yongkang Trans Ocean Network Co.

Yongkang Trans Ocean Network Co., Ltd. is a company engaged in website construction, SEO website optimization search engine optimization, SEM integrated website marketing. Ltd. website construction system newsbig.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain...

Blue Ocean Arbitrary File Read Vulnerability

Blue Ocean plugin is the United States CloudBees company's Jenkins Java-based development of continuous integration tools in a visual management plug-in . A security vulnerability exists in the Blue Ocean plugin that stems from the program failing to detect a user's credentials or authenticate th...

Newspaper Magazine And Blog CMS 1.0 SQL Injection

Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo: http://demo.geniusocean.com/newspaper/ Version: 1.0 Category:...

News Magazine And Blog CMS 1.0 SQL Injection

Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...

News 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo:...

MyMagazine 1.0 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468 Demo:...

Newspaper 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo:...

CloudBees Jenkins Blue Ocean Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Blue...

Newspaper 1.0 - SQL Injection

Newspaper 1.0 - SQL Injection Exploit Title: Newspaper Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-fully-responsive-magazine-cms/19493325 Demo:...

MyMagazine 1.0 - id SQL Injection

MyMagazine 1.0 - id SQL Injection Exploit Title: MyMagazine Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/mymagazine-bootstrap-newspaper-magazine-and-blog-cms-script/19620468 Demo:...