Pajbot Cross-Site Request Forgery Vulnerability

pajbot is a software application. A twitch chatbot. A cross-site request forgery vulnerability exists in versions prior to Pajbot 1.52, which stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit the vulnerability to...

CVE-2021-32632

Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery CSRF. Hosters of the bot should upgrade to v1.52 or stable to install the patch or, as a workaround, can add one modern dependency...

CVE-2021-32632

Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery CSRF. Hosters of the bot should upgrade to v1.52 or stable to install the patch or, as a workaround, can add one modern dependency...

Cross site request forgery (csrf)

Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery CSRF. Hosters of the bot should upgrade to v1.52 or stable to install the patch or, as a workaround, can add one modern dependency...

CVE-2021-32632 CSRF allowing modification of commands, modules, banphrases through hidden iFrames

Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery CSRF. Hosters of the bot should upgrade to v1.52 or stable to install the patch or, as a workaround, can add one modern dependency...

CVE-2021-32632

Pajbot is a Twitch chat bot. CVE-2021-32632 covers CSRF in Pajbot versions prior to 1.52, enabling modification of commands, modules, and banphrases via hidden iframes. Affected component: the web application lacks sufficient request validation, leading to cross-site forgery. Impact is defined as...

[Security Nation] Marina Ciavatta and int eighty Put the Fun into Hacking With Hacking Esports and Dual Core Music

!\Security Nation\ Marina Ciavatta and int eighty Put the Fun into Hacking With Hacking Esports and Dual Core Musichttps://blog.rapid7.com/content/images/2021/04/securitynationlogo-65.jpg In this episode of Security Nation, we are joined by Marina Ciavatta and int eighty to talk about Hacking...

Twitch Will Act on ‘Serious’ Offenses That Happen Off-Stream

The new policy holds streamers to account for what happens on other services and in real life...

A Bird-Feed Seller Beat a Chess Master. Then It Got Ugly

Twitch and YouTube chess star Levy Rozman has faced over a week of sustained harassment after calling out an alleged cheater...

Twitch's First Transparency Report Is Here—and Long Overdue

The decade-old streaming platform has for the first time detailed its efforts to safeguard its user base in one place...

Logitech: One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.com

Summary Hello Team I have found a bypass to the this report. 1039749 Steps To Reproduce: 1. Login to attacker's account and go to settings -- account settings. 2. Intercept the request in burp suite and click on merge twitch account. 3. Allow twitch access and once you see a get request in burp...

Making the Edge Come Alive

In April 2019, Netflix viewers streamed 164 million hours of on-demand content per day. Fast forward a year. In April 2020, Twitch streamed 55 million hours per day. The vast majority of that was live. We have seen the future of video. It is live. But live workflows have challenges and requiremen...

Children Stream on Twitch—Where Potential Predators Find Them

A WIRED investigation found dozens of channels belong to children apparently under 13 and anonymous chat participants sending inappropriate messages their way...

Discord users tempted by bots offering “free Nitro games”

The last few weeks have seen multiple instances of problematic bots appearing in Discord channels. They bring tidings of gifts, but the reality is quite a bit different. Given so many more young kids and teens are at home during the current global lockdown, they may well see this scam bouncing...

Liberapay: Leaking Of Sensitive Information on Github

Summary: Sensitive Data were leaked in https://github.com/liberapay/liberapay.com Steps To Reproduce: 1. Install gitleaks from https://github.com/zricethezav/gitleaks 2. Run the following command in a Linux terminal gitleaks -v --pretty -r=https://github.com/liberapay/liberapay.com The following...

A Twitch Streamer Is Exposing Coronavirus Scams Live

Kitboga has built a following by trolling telemarketers. Covid-19 opportunists have given him a whole new crop of targets...

Twitch Has Become a Haven for Live Sports Piracy

As the platform gains more mainstream popularity, illicit livestreams of soccer, boxing, and MMA matches have become trivial to find...

twitch-clips.tv XSS vulnerability

Open Bug Bounty ID: OBB-623368 Description| Value ---|--- Affected Website:| twitch-clips.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

streamsetup.net XSS vulnerability

Open Bug Bounty ID: OBB-571730 Description| Value ---|--- Affected Website:| streamsetup.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

strawpoll.me XSS vulnerability

Open Bug Bounty ID: OBB-563744 Description| Value ---|--- Affected Website:| strawpoll.me Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...