TH692 Outdoor P2P HD Waterproof IP Camera Hard-Coded Credentials

Exploit Title: TH692- Outdoor P2P HD Waterproof IP Camera hardcoded credentials Date: 4/16/2016 Exploit Author: DLY Vendor: TENVIS Technology Co., Ltd Product: TH692- Outdoor P2P HD Waterproof IP Camera Product webpage: http://www.tenvis.com/th-692-outdoor-p2p-hd-waterproof-ip-camera-p-230.html...

nintei-dev.genio.co.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-146867 Description| Value ---|--- Affected Website:| nintei-dev.genio.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

cardiotube.net Open Redirect vulnerability

Vulnerable URL: http://www.cardiotube.net/AdClick.axd?url=https://www.openbugbounty.org/=046ef4dc-b270-4ba3-a3e6-c2d54bc4c08a=766b9a02-1512-4e82-8232-a2178557871f=7fdcd425-950f-4f6d-8529-bbf6450514e5=beee90bb-5eba-42df-96b0-581eddc04ee1=af6d8d9c-acb6-4e7d-88e4-c6e08227b7bc Details: Description|...

Petya of Salsa: a modified algorithm to bring the defect-vulnerability warning-the black bar safety net

Previously the Hubble analysis of the system describes about the modified MBR for disk encryption extortion Trojan Petya's. Recently Leo Stone gives crack Petya key full blasting code and decrypt tool, and noted that Petya author is using a variant of the Salsa20 algorithm to perform key...

Threat Outbreak Alert RuleID22121: Email Messages Distributing Malicious Software on April 7, 2016

Medium Alert ID: 44547 First Published: 2016 April 7 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22121 may contain the following files: Name | Siz...

Rugby Nations 16 - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Rugby Nations 16 published at the 'play' market has multiple vulnerabilities...

Manchester City Manager '16 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Manchester City Manager '16 published at the 'play' market has multiple vulnerabilities...

FIFA 16 - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FIFA 16 published at the 'play' market has multiple vulnerabilities...

EA SPORTS™ FIFA 16 Companion - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application EA SPORTS™ FIFA 16 Companion published at the 'play' market has multiple vulnerabilities...

FOOT AdrenalynXL™ 2015-16 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FOOT AdrenalynXL™ 2015-16 published at the 'play' market has multiple vulnerabilities...

Card Collector for FUT 16 - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Card Collector for FUT 16 published at the 'play' market has multiple vulnerabilities...

Backgammon 16 Games - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Backgammon 16 Games published at the 'play' market has multiple vulnerabilities...

Weather - 16 days forecast - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Weather - 16 days forecast published at the 'play' market has multiple vulnerabilities...

Mozilla Thunderbird Security Advisories (MFSA2016-16, MFSA2016-38) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird Security Advisories (MFSA2016-16, MFSA2016-38) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

FreeBSD : bind -- denial of service vulnerability (c9075321-f483-11e5-92ce-002590263bf5)

ISC reports : An error parsing input received by the rndc control channel can cause an assertion failure in sexpr.c or alist.c. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-395)

MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=715 The ActionScript parameter conversion in the fix for issue 403 https://code.google.com/p/google-security-research/issues/detail?id=403 can sometimes access a parameter on the native stack that is uninitialized. If: mc.swapDepth...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2016:0777-1)

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : Mozilla Firefox was updated to 38.7.0 ESR bsc969894 - MFSA 2016-16/CVE-2016-1952/CVE-2016-1953 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 - MFSA 2016-17/CVE-2016-1954 Local file overwriting and...

momastore.org XSS vulnerability

Vulnerable URL: https://www.momastore.org/museum/moma/ProductDisplayYoshimoto-Cube-No.-1104511000145657-1267152671545658?momaProductId=45657=67866-item=10001=10451=-1x';%20confirmXSSPOSED//=ProductDisplayYoshimoto%20Cube%20No.%201104511000145657-12671526715=26715=MoMAProductCommonCntrCmd Details:...