osu!downloader (alpha version) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application osu!downloader alpha version published at the 'play' market has multiple vulnerabilities...

Machine Learning Linux IPS: Stratosphere

This is the linux version of the Stratosphere IPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors. It is part of a larger suite of programs that include the Stratosphere Windows IPS and the Stratosphere Testing...

PT-2017-3937

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description The issue is related to the kwajd read headers function in libmspack, which can cause a one or two byte overwrite due to bad KWAJ file header extensions. This can lead to a buffer overflow in...

Google Releases End-To-End Chrome Extension to Open Source

Google yesterday announced that it has released the source code for its End-to-End extension for Chrome to open source via GitHub. End-to-End enables Gmail users to encrypt, sign and verify email messages within the Chrome browser, using OpenPGP. “We’ve always believed strongly that End-To-End mu...

PowieSys <= 0.7.7 alpha index.php (shownews) SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : PowieSys = 0.7.7 alpha index.php shownews SQL Injection Vulnerability +Autor : Easy Laster +Date : 22.03.2010 +Script : PowieSys = 0.7.7 alpha +Download :...

XlentProjects SphereCMS 1.1 'archive.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38309/info SphereCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP Turbulence 0.0.1 Turbulence.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/52113/info Dolibarr is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks...

Offline Windows Analysis and Data Extraction (OWADE) - Forensics tool to expose all your online activity

Offline Windows Analysis and Data Extraction OWADE - Forensics tool to expose all your online activity Researchers "Elie Bursztein" from Stanford University in California have managed to bypass the encryption on a PC's hard drive to find out what websites a user has visited and whether they have...

XlentProjects SphereCMS 1.1 - &#039;archive.php&#039; SQL Injection

source: https://www.securityfocus.com/bid/38309/info SphereCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

TxtBlog (index.php m) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== TxtBlog index.php m Local File Inclusion Vulnerability ======================================================== ============================================================ TxtBlog...

SiteXS CMS 0.1.1 - &#039;upload.php&#039; Arbitrary File Upload

source: https://www.securityfocus.com/bid/29029/info SiteXS is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input. An attacker can leverage this issue to execute arbitrary code on an affected...

PlutoStatus Locator v1.0pre &#40;alpha&#41; local file inclusion vulnerability

PlutoStatus Locator v1.0pre alpha local file inclusion vulnerability download http://sourceforge.net/projects/plutostatus/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/locator/index.php?page=../../../../../../../../../../etc/passwd00...

PT-2007-3828 · Php · Php Turbulence

Name of the Vulnerable Software and Affected Versions: PHP Turbulence version 0.0.1 alpha Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALStcore parameter in the user/turbulence.php file. However, this vulnerability is disputed because a direct...

PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion

PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise t...

PHP Turbulence 0.0.1 - &#039;Turbulence.php&#039; Remote File Inclusion

source: https://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...