35 matches found
CVE-2025-13876 Rareprob HD Video Player All Formats App com.rocks.music.videoplayer path traversal
A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been...
Rareprob HD Video Player All Formats 路径遍历漏洞
Rareprob HD Video Player All Formats is a video player from Rareprob India. A path traversal vulnerability exists in Rareprob HD Video Player All Formats version 12.1.372, which stems from a path traversal issue in the component com.rocks.music.videoplayer...
EUVD-2019-4049
Malware in sbrugna...
Malicious code in test-mlw2-popsy-rocks-dight-molar (npm)
The package test-mlw2-popsy-rocks-dight-molar was found to contain malicious code...
MAL-2025-36015 Malicious code in test-mlw2-popsy-rocks-dight-molar (npm)
The package test-mlw2-popsy-rocks-dight-molar was found to contain malicious code...
CVE-2019-12440
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
rootsrocksociety.com Cross Site Scripting vulnerability OBB-2617595
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lhs1997.rocks Cross Site Scripting vulnerability OBB-1216615
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Hardcoded credentials
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
CVE-2019-12440
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
CVE-2019-12440
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
CVE-2019-12440
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
CVE-2019-12440
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
CVE-2019-12440
The Sitecore Rocks plugin for Sitecore is affected (pre-2.1.149). An unauthenticated attacker can inject malicious commands and code via the Sitecore Rocks Hard Rocks Service, potentially compromising the host. References indicate the fix is in version 2.1.149 (release notes). No additional explo...
PT-2019-12798
Name of the Vulnerable Software and Affected Versions Sitecore Rocks plugin versions prior to 2.1.149 Description The issue allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service. Recommendations For versions prior to 2.1.149, update...
CVE-2019-12440: Improper Authentication
The Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to inject malicious commands and code via the Sitecore Rocks Hard Rocks Service...
Rockstar Games: Race condition vulnerability on "This Rocks" button.
In this report, the researcher brought to our attention a misbehavior in the "This Rocks" button that we use on the Social Club site. Using curl and a proxy tool such as Burp Suite, an attacker could invoke the "This Rocks" API call multiple times rapidly, and the system would accept multiple...
Winx Club: Rocks the World - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Winx Club: Rocks the World published at the 'play' market has multiple vulnerabilities...
Rocks Clusters <= 4.1 (umount-loop) Local Root Exploit
No description provided by source. !/usr/bin/env python rocksumountdirty.py: Rocks release =4.1 local root exploit quick and nasty version of the exploit. make sure the . is writable and you clean up afterwards. ; coded by: [email protected] http://xavsec.blogspot.com x=import'os';c=x.getcwd...
Rocks Clusters <= 4.1 (mount-loop) Local Root Exploit
No description provided by source. !/bin/sh rocksmountdirty.sh: Rocks release =4.1 local root exploit make sure 'mount-loop' is in your path for this to work. coded by: [email protected] http://xavsec.blogspot.com echo Rocks Clusters =4.1 mount-loop local root exploit by [email protected]...