93 matches found
CVE-2021-46879
The CVE-2021-46879 issue affects Treasure Data Fluent Bit 1.7.1. A wrong variable is used when reading msgpack data, causing a heap overflow in flb_msgpack_gelf_value_ext. This can be triggered by a crafted file opened with Fluent Bit, potentially allowing arbitrary code execution on the target s...
treasure-fort.com Cross Site Scripting vulnerability OBB-3170493
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cybercriminals Used Two PoS Malware to Steal Details of Over 167,000 Credit Cards
Two point-of-sale PoS malware variants have been put to use by a threat actor to steal information related to more than 167,000 credit cards from payment terminals. According to Singapore-headquartered cybersecurity company Group-IB, the stolen data dumps could net the operators as much as $3.34...
thailandtreasuretour.com Cross Site Scripting vulnerability OBB-2641808
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DNF Pocket Android version of Chengdu I Fun Technology Co. Ltd. suffers from denial-of-service vulnerability
DNF Pocket Android is a Dungeons & Dragons game profile search application designed for Android users. There is a denial-of-service vulnerability in DNF Pocket Game Treasure Android version by Chengdu Me Fun Technology Co. An attacker can exploit the vulnerability to cause the program to crash...
Tencent App Store PC version suffers from DLL hijacking vulnerability
Tencent Application Treasure is an application acquisition platform created by Tencent Application Center. A DLL hijacking vulnerability exists in the PC version of Tencent App Store, which can be exploited by attackers to execute malicious code...
DLL Hijacking Vulnerability in App Store
Application Treasure is a mobile application acquisition platform created by Tencent Application Center for smartphone users. Application Treasure suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to load untrusted dynamic link libraries for command execution...
Logic Flaw Vulnerability at Workbot Forgot Password
Work treasure is a mobile collaborative office platform for enterprises developed by Guangdong Jiamei Technology Co. There is a logic flaw vulnerability in WorkPower's forgotten password, which can be exploited by an attacker to reset any user's password and obtain sensitive information...
Application Hijacking Vulnerability in Marketing App
Marketing App is a mobile marketing app for cell phones. There is an application hijacking vulnerability in Marketing Treasure APP, which can be exploited by attackers to obtain sensitive information...
roomersgifts.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-638255 Description| Value ---|--- Affected Website:| roomersgifts.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
treasureyourhealth.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-453626 Description| Value ---|--- Affected Website:| treasureyourhealth.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Bubble Shooter Treasure - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Bubble Shooter Treasure published at the 'play' market has multiple vulnerabilities...
Slots - Pharaoh's Treasure - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Slots - Pharaoh's Treasure published at the 'play' market has multiple vulnerabilities...
Slots Lost Treasure Slot Games - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Slots Lost Treasure Slot Games published at the 'play' market has multiple vulnerabilities...
Treasure Diving - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Treasure Diving published at the 'play' market has multiple vulnerabilities...
Magic Treasure - Epic Puzzle - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Magic Treasure - Epic Puzzle published at the 'play' market has multiple vulnerabilities...
Uber Bug Bounty Rewards Loyalty, Promises Transparency
Uber’s bug bounty program emerged from private beta mode yesterday, which it used as a feedback forum for participants in order to develop the public program. “This was pretty unique in its approach,” said HackerOne CTO Alex Rice. Uber’s program is built on the HackerOne platform, and Uber...
Treasure Map — Five Eyes Surveillance Program to Map the Entire Internet
The National Security Agency and its British counterpart, GCHQ, gained secret access to the German telecom companies’ internal networks, including Deutsche Telekom and Netcologne, in an effort to “map the entire Internet — any device, anywhere, all the time.” As reported by German news publicatio...
w-Agora Forum 4.2.1 - Arbitrary File Upload Exploit
No description provided by source. ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site...
