CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

[SECURITY] Fedora 24 Update: python-django-1.9.8-1.fc24

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

support.clean-mx.com XSS vulnerability

Vulnerable URL: http://support.clean-mx.com/clean-mx/phishing.php?ip=50.87.144.247=id DESC'/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Cron Persistence

This module will create a cron or crontab entry to execute a payload. The module includes the ability to automatically clean up those entries to prevent multiple executions. syslog will get a copy of the cron entry. This module requires Metasploit: https://metasploit.com/download Current source:...

Sweet Baby Girl - Clean Up - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Sweet Baby Girl - Clean Up published at the 'play' market has multiple vulnerabilities...

Princess Family Clean Up - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Princess Family Clean Up published at the 'play' market has multiple vulnerabilities...

App Cache Cleaner - 1Tap Clean - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application App Cache Cleaner - 1Tap Clean published at the 'play' market has multiple vulnerabilities...

Phone Clean Speed Booster Fast - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Phone Clean Speed Booster Fast published at the 'play' market has multiple vulnerabilities...

SMS Blocker. Clean Inbox - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Blocker. Clean Inbox published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 23 Update: python-django-1.8.11-1.fc23

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

WordPress Beauty & Clean Theme 1.0.8 - Arbitrary File Upload

WordPress Beauty & Clean theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the theme...

Apache 2.4.7 + PHP 7.0.2 - 'openssl_seal()' Uninitialized Memory Code Execution

?php // Source: http://akat1.pl/?id=1 function getmaps $fh = fopen"/proc/self/maps", "r"; $maps = fread$fh, 331337; fclose$fh; return explode"\n", $maps; function findmap$sym $addr = 0; foreachgetmaps as $record if strstr$record, $sym && strstr$record, "r-xp" $addr = hexdecexplode'-', $record0;...

[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

62.67.194.183 XSS vulnerability

Vulnerable URL: http://62.67.194.183/clean-mx/viruses.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

[SECURITY] Fedora 23 Update: python-django-1.8.6-1.fc23

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

clean-market.com XSS vulnerability

Vulnerable URL: http://www.clean-market.com/srub154-votre-recherche.html Details: Description| Value ---|--- Patched:| Yes, at 26.11.2015 Latest check for patch:| 26.11.2015 16:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1392351 Google Pagerank| 0 VIP...

MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

Shopify: Arbitrary write on s3://shopify-delivery-app-storage/files

Short ==== The policy used to upload files via the Delivery app is too generic which results in an arbitrary write and replace of files in the files/ directory. Disclaimer: While I was unable to create a second store to fully test this I can't create new development stores right now, support is...

Researchers to Develop Long-Lasting Solid-State Batteries

Whenever you go to Buy any Electronic Gadget — Phone, Tablet, Laptop, Watch — the most important specification isn’t its processor speed or its camera quality. It’s how long the device’s battery backup is. Imagine easy access to such batteries that provide more battery power after charging it onc...