ミスタードーナツ×ワオっち！くらべてみよう！ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ミスタードーナツ×ワオっち！くらべてみよう！ published at the 'play' market has multiple vulnerabilities...

リズムえほん 赤ちゃんのアプリ知育音楽リズム遊びゲーム 無料 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application リズムえほん 赤ちゃんのアプリ知育音楽リズム遊びゲーム 無料 published at the 'play' market has multiple vulnerabilities...

タッチ！ことばランド　2歳から遊べる言葉を育む子供向けアプリ - Native code usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application タッチ！ことばランド 2歳から遊べる言葉を育む子供向けアプリ published at the 'play' market has multiple vulnerabilities...

さがして！なぞって！アンパンマン - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application さがして！なぞって！アンパンマン published at the 'play' market has multiple vulnerabilities...

ばんぱいあなカレ BL Free! - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application ばんぱいあなカレ BL Free! published at the 'play' market has multiple vulnerabilities...

信長の野望 201X - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 信長の野望 201X published at the 'play' market has multiple vulnerabilities...

[モバ7]SLOT魔法少女まどか☆マギカ - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application モバ7SLOT魔法少女まどか☆マギカ published at the 'play' market has multiple vulnerabilities...

バトルガール ハイスクール - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application バトルガール ハイスクール published at the 'play' market has multiple vulnerabilities...

ワールドギミック - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ワールドギミック published at the 'play' market has multiple vulnerabilities...

Coursera: XSS in https://www.coursera.org/courses/

DESCRIPTION ================= It has been identified that the page located at https://www.coursera.org/courses/ is prone to cross-site scripting issues. Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts also commonly referred to...

Liferay Portal 5.1.2 - Persistent Cross-Site Scripting

Liferay Portal 5.1.2 - Persistent Cross-Site Scripting Exploit Title: Liferay Portal 5.1.2 - Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Sarim Kiani Vendor Homepage: https://www.liferay.com Software Link: https://www.liferay.com/community/releases Version: 5.1.2 Tested on: Windows O...

shop.rostex.ua Open Redirect vulnerability

Vulnerable URL: http://shop.rostex.ua/setlang?lang=en=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0...

BinDiff Now Free, To Delight of Security Researchers

BinDiff is a constant presence inside a security researcher’s toolbox, ideal for patch and malware analysis or reverse engineering of code. The Google-owned software allows researchers to conduct side-by-side comparisons of binary files in disassembled code looking for differences in the samples...

Monstra CMS 3.0.3 - Multiple Vulnerabilities

Monstra CMS 3.0.3 - Multiple Vulnerabilities Exploit Title: Monstra CMS 3.0.3 - Privilege Escalation / Remote Password Change Google Dork: intext:"Powered by Monstra"/users/registration Date: 2016-03-28 Exploit Author: Sarim Kiani Vendor Homepage: http://monstra.org Software Link:...

RedHat Update for xerces-c RHSA-2016:0430-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Liferay Portal 5.1.2 Cross Site Scripting

Exploit Title: Liferay Portal 5.1.2 - Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Sarim Kiani Vendor Homepage: https://www.liferay.com Software Link: https://www.liferay.com/community/releases Version: 5.1.2 Tested on: Windows OS Liferay Portal 5.1.2 is an open source version of...

mMR (mobile Medical Records) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application mMR mobile Medical Records published at the 'play' market has multiple vulnerabilities...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

FreeBSD : bsh -- remote code execution vulnerability (9e5bbffc-d8ac-11e5-b2bd-002590263bf5)

Stian Soiland-Reyes reports : This release fixes a remote code execution vulnerability that was identified in BeanShell by Alvaro Munoz and Christian Schneider. The BeanShell team would like to thank them for their help and contributions to this fix! An application that includes BeanShell on the...

How Often Should You Scan Websites and Web Applications for Vulnerabilities?

Web Applications and Websites Exist in a Dynamic Environment There is no questioning the fact that the web application security landscape is in a constant state of flux. The pace of change is not only rapid but resembles a constant game of cat and mouse between hackers and security professionals...