Malwarebytes Premium Denial of Service Vulnerability (CNVD-2018-02558)

Malwarebytes Premium is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. A security vulnerability exists in the FARFLT.SYS driver file ...

PT-2018-16852 · Malwarebytes +1 · Malwarebytes Premium +2

Name of the Vulnerable Software and Affected Versions: Malwarebytes Premium version 3.3.1.2183 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e008 in the driver file...

PT-2018-16856 · Malwarebytes · Malwarebytes Premium

Name of the Vulnerable Software and Affected Versions: Malwarebytes Premium version 3.3.1.2183 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020 in the driver file...

Malwarebytes Premium Denial of Service Vulnerability (CNVD-2018-02556)

Malwarebytes Premium is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. A security vulnerability exists in the FARFLT.SYS driver file ...

Clooud 1.4.0 Shell Upload

======================================================================================================= | Title : Clooud v1.4.0 - Premium Media Sharing Script unrestricted file upload Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais...

WordPress Relevanssi Premium Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.Relevanssi Premium is a commercial version of the instant search plugin for websites. A cross-site scripting vulnerabilit...

CVE-2017-1000225

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssididyoumean could allow unauthenticated attacker to do almost anything an admin can...

Cross site scripting

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssididyoumean could allow unauthenticated attacker to do almost anything an admin can...

CVE-2017-1000225

CVE-2017-1000225 concerns a reflected XSS in Relevanssi Premium 1.14.8 for WordPress when using relevanssi_didyoumean() . The flaw could allow an unauthenticated attacker to perform almost anything an admin can. Affected component is the Relevanssi Premium plugin; root cause is reflected XSS. The...

CVE-2017-1000225

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssididyoumean could allow unauthenticated attacker to do almost anything an admin can...

WordPress WP Simple Booking Calendar Premium plugin <= 6.0-6.1 - Unauthenticated Data leak

When you know the URL which the plugin uses to export iCal feed, then you can see the availability and booking notes via that feed. Solution Update the plugin to 6.2...

WordPress WP Simple Booking Calendar Premium plugin 5.0–5.4 <= Unauthenticated Data leak

The booking notes are shown in the source code of the page. Solution Update the plugin to 5.5 version...

Hackers Prepping IOTroop Botnet with Exploits

Hackers moved one step closer to launching full-scale DDoS attacks using millions of IoT devices herded into the botnet known as Reaper or IOTroop. Researchers at NewSky Security warn that hackers are swapping scripts on forums that can scan the internet for vulnerable IoT devices and dump defaul...

First Android Malware Found Exploiting Dirty COW Linux Flaw to Gain Root Privileges

Nearly a year after the disclosure of the Dirty COW vulnerability that affected the Linux kernel, cybercriminals have started exploiting the vulnerability against Android users, researchers have warned. Publicly disclosed last year in October, Dirty COW was present in a section of the Linux...

Sharing Premium App Has Logic Design Flaws

Shared Premium APP is a mobile software that focuses on saving money on online shopping. Sharing Premium APP has a logical design loophole, the attacker can arbitrarily register users and arbitrarily reset passwords by grabbing packets and bursting verification codes...

Yet Another Android Malware Infects Over 4.2 Million Google Play Store Users

Even after so many efforts by Google, malicious apps somehow managed to fool its Play Store's anti-malware protections and infect people with malicious software. The same happened once again when at least 50 apps managed to make its way onto Google Play Store and were successfully downloaded as...

WAP-billing Trojan-Clickers on rise

During the preparation of the "IT threat evolution Q2 2017" report I found several common Trojans in the "Top 20 mobile malware programs" list that were stealing money from users using WAP-billing - a form of mobile payment that charges costs directly to the user's mobile phone bill so they don't...

manageo.fr XSS vulnerability

Vulnerable URL: https://www.manageo.fr/devenez-premium.html?s=818624884=16=presentation=fc=5=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 76024 VIP website status:| No Check manageo.fr SSL connection:| Grade...

Premium Servers List Tracker 1.0 SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 a SQL Injection Date: 02.08.2017 Vendor Homepage: https://codecanyon.net/item/premium-servers-list-tracker/19796599?srank=270 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

Premium Servers List Tracker 1.0 - SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 – SQL Injection Date: 02.08.2017 Vendor Homepage: https://codecanyon.net/item/premium-servers-list-tracker/19796599?srank=270 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...