144 matches found
WordPress plugin Cache Sniper for Nginx 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-5082 · Unknown · Cache Sniper For Nginx
Name of the Vulnerable Software and Affected Versions: Cache Sniper for Nginx versions 1.0.4.2 and earlier Description: The issue is related to a missing authorization vulnerability in Cache Sniper for Nginx, which allows exploiting incorrectly configured access control security levels...
CVE-2024-13108
A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...
Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials
More than 140,000 phishing websites have been found linked to a phishing-as-a-service PhaaS platform named Sniper Dz over the past year, indicating that it's being used by a large number of cybercriminals to conduct credential theft. "For prospective phishers, Sniper Dz offers an online admin pan...
sniper-tanks.nl Cross Site Scripting vulnerability OBB-3119506
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in discord-sniper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38673efb9456e4282912e232e77000f3e6d4bf3c766f112e0f651d06e2b65175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2492 Malicious code in discord-sniper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38673efb9456e4282912e232e77000f3e6d4bf3c766f112e0f651d06e2b65175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VMware ESXi Servers Encrypted by Lightning-Fast Python Script
Researchers have discovered a new Python ransomware from an unnamed gang that’s striking ESXi servers and virtual machines VMs with what they called “sniper-like” speed. Sophos said on Tuesday that the ransomware is being used to compromise and encrypt VMs hosted on an ESXi hypervisor in operatio...
Compromising vital infrastructure: the power grid
Where were you when the lights went out? That line became famous after the 1977 blackout in New York City. This power outage was caused by lightning and lasted for up to two days, depending on which part of New York you lived in. While in this case the power grid failure was a freak incident due ...
Sniper Shooting War - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Shooting War published at the 'play' market has multiple vulnerabilities...
FreeBSD : chromium -- multiple vulnerabilities (7cf058d8-158d-11e7-ba2c-e8e0b747a45a)
Google Chrome Releases reports : 5 security fixes in this release, including : - 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar - 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs - 662767 High CVE-2017-5052: Bad...
VMSA-2017-0006 : VMware ESXi, Workstation and Fusion updates address critical and moderate security issues
a. ESXi, Workstation, Fusion SVGA memory corruption ESXi, Workstation, Fusion have a heap buffer overflow and uninitialized stack memory usage in SVGA. These issues may allow a guest to execute code on the host. VMware would like to thank ZDI and Team 360 Security from Qihoo for reporting these...
sniper.com.mx XSS vulnerability
Vulnerable URL: http://www.sniper.com.mx/search.php?s=%22%3E%3C/title%3E%27%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5026705 VIP websi...
Sniper Fury - Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Fury published at the 'play' market has multiple vulnerabilities...
Sniper 3D Assassin: Free Games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Sniper 3D Assassin: Free Games published at the 'play' market has multiple vulnerabilities...
Sniper Shoot War 3D - Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Shoot War 3D published at the 'play' market has multiple vulnerabilities...
Basketball Sniper - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Basketball Sniper published at the 'play' market has multiple vulnerabilities...
Sniper Camera Gun 3D - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Camera Gun 3D published at the 'play' market has multiple vulnerabilities...
Sniper Duty: Terrorist Strike - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Duty: Terrorist Strike published at the 'play' market has multiple vulnerabilities...
Sniper Dino Mania - Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Sniper Dino Mania published at the 'play' market has multiple vulnerabilities...