The React application in the most common XSS exploits and Defense-vulnerability warning-the black bar safety net

The author has been firmly React technology stack of the user, and therefore will pay attention to the React application security related topics. The author in my ownReact+Redux+Webpack2scaffolding the third level also uses a lot of server-side rendering/isomorphism straight out of the technology...

The University of Georgia - External URLs, SD-card access, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application The University of Georgia published at the 'play' market has multiple vulnerabilities...

Silk TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Silk TV published at the 'play' market has multiple vulnerabilities...

Figure 1 - Medical Images - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Figure 1 - Medical Images published at the 'play' market has multiple vulnerabilities...

Acunetix v11 - Web Application Security Testing Tool

London, UK – November 2016 – Acunetix, the pioneer in automated web application security software, has announced the release of version 11. New integrated vulnerability management features extend the enterprise’s ability to comprehensively manage, prioritise and control vulnerability threats –...

Multiple F5 BIG-IP Product Denial of Service Vulnerabilities

F5 BIG-IP ASM Application Security Manager is a network security product from F5 Corporation, U.S.A. ASM is a comprehensive web application firewall that protects applications and data from known and unknown threats, defends against Trojans that bypass standard protections, and patches...

F5 BIG-IP ASM Denial of Service Vulnerability

F5 BIG-IP ASM Application Security Manager is a network security product from F5 Corporation, U.S.A. ASM is a comprehensive web application firewall that protects applications and data from known and unknown threats, defends against Trojans that bypass standard protections, and patches...

Informatica: [marketplace.informatica.com] Persistent XSS through document title

Document titles are not properly escaped before being printed on https://marketplace.informatica.com/docs/ . By including a payload in a document title, an attacker can create a document with a persistent XSS vector which executes for anyone viewing the document page. Proof of concept === The...

ЛокоБизнес - Certificates or keys found, Corrupted files, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ЛокоБизнес published at the 'play' market has multiple vulnerabilities...

CNDSOFT 2.3 - Cross-Site Request Forgery Arbitrary File Upload

CNDSOFT 2.3 - Cross-Site Request Forgery Arbitrary File Upload ========================================================================================================= Exploit Title: CNDSOFT 2.3 - Arbitrary File Upload with CSRF shell.php Author: Besim Google Dork: - Date: 19/10/2016 Type: webap...

yawast - The YAWAST Antecedent Web Application Security Toolkit

YAWAST is an application meant to simplify initial analysis and information gathering for penetration testers and security auditors. It performs basic checks in these categories: TLS/SSL - Versions and cipher suites supported; common issues. Information Disclosure - Checks for common information...

Colorful Blog Cross Site Scripting

Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting Author : ----------------- : Besim Google Dork : --------- : - Date : -------------------- : 13/10/2016 Type : -------------------- : webapps Platform : --------------- : PHP Vendor Homepage :-- : - Software link : --------...

Colorful Blog - Cross-Site Request Forgery (Change Admin Password)

Exploit Title :----------- : Colorful Blog - Cross-Site Request Forgery Change Admin Pass Author :------------------ : Besim Google Dork :---------- : - Date :--------------------- : 13/10/2016 Type :--------------------- : webapps Platform :---------------- : PHP Vendor Homepage :-- : - Software...

Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)

Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link : http://www.hotscripts.com/listings/jump/download/21864 CSRF PoC " /...

نمبر بوك السعودي Number Book - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application نمبر بوك السعودي Number Book published at the 'play' market has multiple vulnerabilities...

أسرار ليلة الدخلة 2016 - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application أسرار ليلة الدخلة 2016 published at the 'play' market has multiple vulnerabilities...

JUSTApp - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application JUSTApp published at the 'play' market has multiple vulnerabilities...

CVE-2016-7954

Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334...

Asphalt 8: Airborne - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Asphalt 8: Airborne published at the 'play' market has multiple vulnerabilities...

Бонус Плюс - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Бонус Плюс published at the 'play' market has multiple vulnerabilities...