3340 matches found
Portrait Display SDK Service Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation due to insecure service configuration product: Portrait Display SDK Service vulnerable version: mutliple, see PoC fixed version: multiple, see soluti...
myAudi mobile assistant - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application myAudi mobile assistant published at the 'play' market has multiple vulnerabilities...
mercury-ep.com XSS vulnerability
Vulnerable URL: http://www.mercury-ep.com/blog/index.php/"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check mercury-ep.com...
Followers Assistant - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Followers Assistant published at the 'play' market has multiple vulnerabilities...
Yahoo Mail XSS Bug Worth Another $10K to Researcher
The déjà vu is real for Finnish security researcher Jouko Pynnonen. Just shy of a year ago, Pynnonen privately disclosed a stored cross-site scripting vulnerability in Yahoo Mail, and was rewarded with a $10,000 bounty through Yahoo’s HackerOne program. Fast forward to last month, and there was...
Hewlett Packard TouchSmart Calendar Service 4.1.4245 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard TouchSmart Calendar Service File version : 4.1.4245 HP TouchSmart Calendar is a shared calendar where you c...
Wise Boot Assistant 4.28.416 Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link:...
Wise Boot Assistant 4.28.416 Privilege Escalation
Exploit Title: Wise Boot Assistant Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://www.wisecleaner.com/ Software Link: http://downloads.wisecleaner.com/soft/WiseCare365.exe version : 4.28.416 Latest Tested on: Windows 7 Wis...
[SECURITY] Fedora 23 Update: openvas-gsa-6.0.11-3.fc23
The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...
[SECURITY] Fedora 24 Update: openvas-gsa-6.0.11-3.fc24
The Greenbone Security Assistant GSA is a lean web service offering a user web interface for the Open Vulnerability Assessment System OpenVAS. The GSA uses XSL transformation style-sheets that converts OMP responses from the OpenVAS infrastructure into presentable HTML...
EFF Blasts Microsoft Over Windows 10 Rollout
The Electronic Frontier Foundation is blasting Microsoft for its “malicious” and “annoying” tactics when it comes to prodding Windows users to update their operating system to Windows 10. The digital watchdog group says Microsoft’s strategy of pushing the Windows 10 upgrade application onto users...
CVE-2016-1441
Cisco Cloud Network Automation Provisioner CNAP 1.00 in Cisco Configuration Assistant CCA allows remote attackers to bypass intended filesystem and administrative-endpoint restrictions via GET API calls, aka Bug ID CSCuy77145...
CVE-2016-1441
CVE-2016-1441 affects Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) within Cisco Configuration Assistant (CCA). The vulnerability lets unauthenticated remote attackers bypass filesystem and administrative-endpoint restrictions by issuing GET API calls to CNAP’s API endpoints. Root caus...
Cisco Configuration Assistant Cloud Network Automation Provisioner Information Disclosure Vulnerability
Cisco Configuration Assistant CCA is a suite of solutions from Cisco that simplifies the configuration, deployment, and management of Cisco intelligent business communications systems.Cisco Cloud Network Automation Provisioner CNAP is one of the cloud network Automation Provisioning Software. An...
Cisco Configuration Assistant Request Processing Unauthorized Access Vulnerability
A vulnerability in Cisco Configuration Assistant CCA could allow an unauthenticated, remote attacker to access sensitive file systems and administrative endpoints without user authentication. The vulnerability is due to lack of controller mechanisms and input validation checks. An attacker could...
The vulnerability of the Mac OS X operating system, which allows a hacker to execute arbitrary code
The vulnerability of the Captive Network Assistant component for the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Norwegian Travel Assistant - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Norwegian Travel Assistant published at the 'play' market has multiple vulnerabilities...
Apple OS X El Capitan Captive Network Assistant Arbitrary Code Execution Vulnerability
Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Apple OS X El Captive Network Assistant allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...
Google Allo a Clash of Privacy and Functionality
Reaction to the release of Google’s Allo messaging app has been mixed since it was unveiled Wednesday during Google’s I/O event. Allo has two modes, a normal mode run by an artificial intelligence that includes Google Assistant. It analyzes messages and offers suggestions based on the content tha...
