Baby Panda´s Daily Life - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Baby Panda´s Daily Life published at the 'play' market has multiple vulnerabilities...

Flaming 7's Slot Machine - BSD license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Flaming 7's Slot Machine published at the 'play' market has multiple vulnerabilities...

S Health - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application S Health published at the 'play' market has multiple vulnerabilities...

Navi S-Bahn Stuttgart - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Navi S-Bahn Stuttgart published at the 'play' market has multiple vulnerabilities...

S-Bahn Berlin - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application S-Bahn Berlin published at the 'play' market has multiple vulnerabilities...

Rollei S-30 WiFi - BSD license, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Rollei S-30 WiFi published at the 'play' market has multiple vulnerabilities...

S Launcher (Galaxy S6 Launcher - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application S Launcher Galaxy S6 Launcher published at the 'play' market has multiple vulnerabilities...

G und S - GPL license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application G und S published at the 'play' market has multiple vulnerabilities...

S Broker Mobile App - Certificates or keys found, Insecure KeyStore, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application S Broker Mobile App published at the 'play' market has multiple vulnerabilities...

S-Reader - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application S-Reader published at the 'play' market has multiple vulnerabilities...

S-Immobilienfinder - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application S-Immobilienfinder published at the 'play' market has multiple vulnerabilities...

Linux/x86_x64 - execve/bin/sh - 26 bytes

Linux/x86x64 - execve/bin/sh - 26 bytes. Shellcode exploit for linx86-64 platform / --------------------------------------------------------------------------------------------------- Linux/x86x64 - execve/bin/sh - 26 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa...

Oracle: Security Advisory (ELSA-2016-0371)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ruvar OA系统 plan_template_preview.aspx 参数template_id SQL注入漏洞

0x01 框架介绍 ruvar OA采用基于IE浏览器的 B/S 结构，以人员管理、考勤管理、薪资管理、招聘管理、培训管理、合同管理、社保福利、绩效考核、报表中心为核心功能模块，是企业领导、HR经理和员工全员参与的，可多层次管理的集团版eHR系统。 官方主页：http://www.ruvar.com/ 0x02 漏洞细节 /WorkPlan/plantemplatepreview.aspx?templateid 处存在SQL注入漏洞。 案例：...

Huawei Mate S Local Integer Overflow Vulnerability

The Huawei Mate S is a smartphone product from the Chinese company Huawei. The Huawei Mate S suffers from a local integer overflow vulnerability that allows an attacker to exploit the vulnerability to execute arbitrary code in the context of the device or crash the application...

MS16-015: Security Update for Microsoft Office to Address Remote Code Execution (3134226) (Mac OS X)

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted file in Microsoft...

[SECURITY] Fedora 22 Update: php-PHPMailer-5.2.14-1.fc22

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

[SECURITY] Fedora 23 Update: php-PHPMailer-5.2.14-1.fc23

Full Featured Email Transfer Class for PHP. PHPMailer features: Supports emails digitally signed with S/MIME encryption! Supports emails with multiple TOs, CCs, BCCs and REPLY-TOs Works on any platform. Supports Text & HTML emails. Embedded image support. Multipart/alternative emails for mail...

用友TurboCRM /ajax/getemaildata.php 任意文件读取漏洞

漏洞信息： 用友TurboCRM客户关系管理系统是一套基于B/S架构、互联网模式应用普及的信息化趋势，专为中小企业提供包括客户管理、销售管理、项目管理等应用的在线CRM。 用友TurboCRM /ajax/getemaildata.php 存在任意文件读取漏洞导致敏感信息泄漏。 漏洞分析： 漏洞存在于/ajax/getemaildata.php filePath参数未有效过滤，导致可以使用 ../../ 越权读取任意文件。 可使用以下URl测试读取系统文件：...

RuvarRHM select_baseinfo.aspx bt_name参数SQL注入漏洞

0x01 框架介绍 uvarHRM人力资源管理系统，汇集了众多成功企业先进的人力资源管理理念、人力资源管理实践、人力资源信息化系统建设的宝贵经验，以先进的信息技术，实现对企业人力资源信息的高度集成化管理，是适合中国企业使用的人力资源管理解决方案，为现代企业的成长与发展提供了先进、科学、务实的人力资源管理模式。 RuvarHRM采用基于IE浏览器的 B/S 结构，以人员管理、考勤管理、薪资管理、招聘管理、培训管理、合同管理、社保福利、绩效考核、报表中心为核心功能模块，是企业领导、HR经理和员工全员参与的，可多层次管理的集团版eHR系统。 官方主页：http://www.ruvar.com/...