Ubiquiti Inc.: Read-Only user can execute arbitraty shell commands on AirOS

This vulnerability is very similar to 128750, but it avoid the solution applied to the last beta XM firmware. In this report is used the last beta XM firmware: XM.v6.0-beta9 Vulnerability The vulnerability resides in the function fetchCookies file remote.inc:117. Just like last time is a non...

fengcms_v1.32.beta 前台SQL注入

No description provided by source...

DotCMS Cross-Site Scripting Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS 3.5 Beta. An attacker can exploit this vulnerability to...

DotCMS Directory Traversal Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A directory traversal vulnerability exists in the com.dotmarketing.servlets.taillog.TailLogServlet.class file i...

APITest.IO: beta version reveals paths, environment variables and partially files contents

Hi guys! You should disable error reporting on beta version. It reveals lot of information and even files contents. How to reproduce: 1 Navigate to http://beta.apitest.io/newsletter, modify csrf-token "token" to any data. 2 input something to "email" and "name" fields. 3 submit the form. As resul...

Zombie Raiders Beta - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Raiders Beta published at the 'play' market has multiple vulnerabilities...

Drunken Ed (Beta) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Drunken Ed Beta published at the 'play' market has multiple vulnerabilities...

MyFRITZ!App 2 Beta - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MyFRITZ!App 2 Beta published at the 'play' market has multiple vulnerabilities...

Caldav Sync Free Beta - Customized SSL, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Caldav Sync Free Beta published at the 'play' market has multiple vulnerabilities...

Chrome Beta - BSD license, Exported ContentProvider, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Chrome Beta published at the 'play' market has multiple vulnerabilities...

AMBOSS Bibliothek Beta-Version - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AMBOSS Bibliothek Beta-Version published at the 'play' market has multiple vulnerabilities...

AudioPocket BETA - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AudioPocket BETA published at the 'play' market has multiple vulnerabilities...

MoodDiary BETA - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MoodDiary BETA published at the 'play' market has multiple vulnerabilities...

OnlineIFA video chat BETA - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application OnlineIFA video chat BETA published at the 'play' market has multiple vulnerabilities...

Wikipedia Beta - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wikipedia Beta published at the 'play' market has multiple vulnerabilities...

Hacker Reveals How to Hack Any Facebook Account

Hacking Facebook account is one of the major queries of the Internet user today. It's hard to find — how to hack Facebook account, but an Indian hacker just did it. A security researcher discovered a 'simple vulnerability' in the social network that allowed him to easily hack into any Facebook...

New Relic: Unauthorized Access

Summary of Findings ------------------------------- The remote server https://download.newrelic.com allowed unauthenticated access to special access files that are only intended to be accessible after contacting the New Relic program managers as seen below. Exploiting the...

Maru OS — Android ROM that Turns into Debian Linux When Connected to a PC

Good News for Linux Techno Freaks! Do you usually mess with your Android smartphone by trying out the continual ins and outs of various apps and custom ROMs? Then this news would be a perfect pick for you! What If, you can effectively carry a Linux computer in your pocket? Hereby introducing a ne...

JVN#50899877: acmailer vulnerable to OS command injection

acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Impact An authenticated attacker may execute an arbitrary OS command on the server. Solution Update the software Update to the latest version according to the information provided by the developer. Products...

WinRAR Arbitrary Code Execution Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An arbitrary code execution vulnerability exists in WinRAR. The vulnerability can be exploited to execute arbitrary code with...