Linux Meterpreter, Reverse TCP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1140752 include...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3609 advisory. - fs/exec.c: account for argv/envp pointers Kees Cook Orabug: 26638900 CVE-2017-1000365 CVE-2017-1000365 - dentry name snapshots Al Viro Orabug:...

Linux Meterpreter, Reverse HTTP Inline

Run the Meterpreter / Mettle server payload stageless This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Module generated by tools/modules/generatemettlepayloads.rb module MetasploitModule CachedSize = 1137332 include...

thomascook.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-184958 Security Researcher tbm Helped patch 2374 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting thomascook.com website and its...

notes.de.thomascook.com XSS vulnerability

Vulnerable URL: https://notes.de.thomascook.com/fb-db/finance/runz.nsf/webAnmeldung?OpenForm=ES=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2016 Latest check for patch:| 19.08.2016 13:59 GMT Vulnerability type:| XSS Vulnerability...

alpha.thomascook.com XSS vulnerability

Vulnerable URL: http://alpha.thomascook.com/travel-money/buy-australian-dollars/?dbTrail==%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 20:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cruise.thomascook.com XSS vulnerability

Vulnerable URL: https://cruise.thomascook.com/emailus.rvlx?message=%3C/select%3E%3Cbody/onpageshow=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2016 Latest check for patch:| 11.10.2016 13:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

thomascook.com XSS vulnerability

Vulnerable URL: http://www.thomascook.com/tv/category/featured-destinations/canary-islands/?orderby=comment=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.08.2016 Latest check for patch:| 05.08.2016 11:42 GMT Vulnerability type:| XSS...

ess.cookchildrens.org XSS vulnerability

Vulnerable URL: https://ess.cookchildrens.org/sso/SSOServlet?locale=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Cooking Apple Pie - Cook games - Dangerous filesystem permissions, Insecure KeyStore, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Cooking Apple Pie - Cook games published at the 'play' market has multiple vulnerabilities...

You Can Cook - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application You Can Cook published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travel Insight - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travel Insight published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travelguide - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travelguide published at the 'play' market has multiple vulnerabilities...

Apple Engineers say they may Quit if ordered to Unlock iPhone by FBI

Apple Vs. FBI battle over mobile encryption case is taking more twists and turns with every day pass by. On one hand, the US Department of Justice DOJ is boldly warning Apple that it might compel the company to hand over the source code of its full iOS operating system along with the private...

Florida Sheriff threatens to Arrest 'Rascal' Tim Cook if He Doesn't Unlock the iPhone

The legal battle between Apple and the Federal Bureau of Investigation FBI is turning ugly with each passing day. Apple is fighting with the federal authorities over iPhone encryption case. The Federal Bureau of Investigation FBI requires Apple’s assistance to unlock an iPhone 5C belonging to San...

Apple Files Motion to Vacate Court Order to Unlock iPhone

It took Apple nine words to make its point: “This is not a case about one isolated iPhone.” Apple on Thursday filed a motion to vacate a court order mandating it assist the FBI in unlocking an iPhone belonging to the San Bernardino shooter. Apple said the order violates its First Amendment...

Apple Must Threat Model Against Itself

Apple, like most advanced tech companies, understands threats and how to close them off. But one salient point that’s emerged from its ongoing dispute with the FBI over unlocking the San Bernardino shooter’s phone is that Apple is a threat to itself. Therefore, it should be no surprise that Apple...

Apple vs. FBI — Google Joins Tim Cook in Encryption Backdoor Battle

In the escalating battle between the Federal Bureau of Investigation FBI and Apple over iPhone encryption, former National Security Agency NSA contractor Edward Snowden and Google chief executive Sundar Pichai just sided with Apple's refusal to unlock iPhone. Yesterday, Apple CEO Tim Cook refused...

Apple CEO Tim Cook Opposes Court Order

Apple CEO Tim Cook late Tuesday defiantly challenged a U.S federal magistrate judge’s order that it help the FBI break into an iPhone 5c belonging to one of the shooters involved in last December’s attack in San Bernardino, Calif. Cook released a letter last night expressing his opposition to the...

Judge Orders Apple to Unlock iPhone Used by San Bernardino Shooters

The Tech Giant Apple has come into an entangled situation which could be a potential security threat for Apple users in near future: Help the FBI Unlock an iPhone. The US Magistrate Judge Sheri Pym has ordered Apple to provide a reasonable technical assistance in solving a critical case of Syed...