Belkin Wemo-Enabled Crock-Pot Remote Control

This module acts as a simple remote control for Belkin Wemo-enabled Crock-Pots by implementing a subset of the functionality provided by the Wemo App. No vulnerabilities are exploited by this Metasploit module in any way. This module requires Metasploit: https://metasploit.com/download Current...

Unbreakable Enterprise kernel security update

4.1.12-124.19.6 - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28709994 CVE-2018-14634...

Black Hat 2018: Google Bug Hunter Urges Apple to Change its iOS Security Culture

LAS VEGAS – Prolific Google bug hunter Ian Beer ripped into Apple on Wednesday, urging the iPhone maker to change its culture when it comes to iOS security. He said the company suffers from an all-too-common affliction of patching an iOS bug, but not fixing the systemic roots that contribute to t...

CVE-2018-6913

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...

cook-ware.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-556673 Description| Value ---|--- Affected Website:| cook-ware.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Linux Meterpreter, Reverse HTTP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1519544 include...

OSX Meterpreter, Reverse HTTPS Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 815032 include...

Linux Meterpreter, Reverse TCP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1140752 include...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3609 advisory. - fs/exec.c: account for argv/envp pointers Kees Cook Orabug: 26638900 CVE-2017-1000365 CVE-2017-1000365 - dentry name snapshots Al Viro Orabug:...

Linux Meterpreter, Reverse HTTP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1137332 include...

thomascook.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-184958 Security Researcher tbm Helped patch 2374 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting thomascook.com website and its...

notes.de.thomascook.com XSS vulnerability

Vulnerable URL: https://notes.de.thomascook.com/fb-db/finance/runz.nsf/webAnmeldung?OpenForm=ES=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2016 Latest check for patch:| 19.08.2016 13:59 GMT Vulnerability type:| XSS Vulnerability...

alpha.thomascook.com XSS vulnerability

Vulnerable URL: http://alpha.thomascook.com/travel-money/buy-australian-dollars/?dbTrail==%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 20:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cruise.thomascook.com XSS vulnerability

Vulnerable URL: https://cruise.thomascook.com/emailus.rvlx?message=%3C/select%3E%3Cbody/onpageshow=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2016 Latest check for patch:| 11.10.2016 13:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

thomascook.com XSS vulnerability

Vulnerable URL: http://www.thomascook.com/tv/category/featured-destinations/canary-islands/?orderby=comment=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.08.2016 Latest check for patch:| 05.08.2016 11:42 GMT Vulnerability type:| XSS...

ess.cookchildrens.org XSS vulnerability

Vulnerable URL: https://ess.cookchildrens.org/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Cooking Apple Pie - Cook games - Dangerous filesystem permissions, Insecure KeyStore, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Cooking Apple Pie - Cook games published at the 'play' market has multiple vulnerabilities...

You Can Cook - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application You Can Cook published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travel Insight - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travel Insight published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travelguide - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travelguide published at the 'play' market has multiple vulnerabilities...