2020: My Country - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application 2020: My Country published at the 'play' market has multiple vulnerabilities...

Country Friends - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Country Friends published at the 'play' market has multiple vulnerabilities...

Country Life: Harvest Day - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Country Life: Harvest Day published at the 'play' market has multiple vulnerabilities...

Typosquatters Target Mac Users With New .OM Domain Scam

Typosquatters are targeting Apple computer users with malware in a recent campaign that snares clumsy web surfers who mistakenly type .om instead of .com when surfing the web. According to Endgame security researchers, the top level domain for Middle Eastern country Oman .om is being exploited by...

用友人力资源管理 country 和 language 字段任意文件下载漏洞

No description provided by source...

iQ Block Country <= 1.1.19 - Authenticated Reflected Cross-Site Scripting (XSS)

The iQ Block Country WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress iQ Block Country Plugin <= 1.1.19 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "ipaddress". Solution Update this plugin...

WordPress iQ Block Country Plugin <= 1.1.19 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "ipaddress". Solution Update this plugin...

Sql injection

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow 1 remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or 2 remote administrators to execute arbitrary SQL commands via the status parameter to...

CVE-2012-1665

Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow 1 remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or 2 remote administrators to execute arbitrary SQL commands via the status parameter to...

CVE-2012-6691

Multiple cross-site request forgery CSRF vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 status parameter to admin/statsmonthlysales.php or 2 country parameter...

CVE-2015-2250

Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...

OS Solution OSProperty 2.8.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL injection in the countryid parameter of the request made to retrieve a list of states for a given country. The version was not bumped when the vulnerability was fixed, but i...

IP Thief - Simple IP Stealer in PHP

A simple PHP script to capture the IP address of anyone that send the "imagen.php" file with the following options: + It comes with an administrator to view and delete IP + You can change the redirect URL image + Can you see the country of the visitor Download IP Thief...

IL and CSRF vulnerabilities in D-Link DAP-1360

Hello 3APA3A! There are Information Leakage and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...

U.S. Nuclear Regulator Hacked Three Times in Three Years

Hackers hit the U.S. Nuclear Regulatory Commission NRC three separate times during the past three years, duping employees of the agency into spreading malware and clicking through phishing links intended to harvest log-in credentials. A NextGov report on Monday said hackers in an unnamed foreign...

Facebook - Account's Phone Number Brute-Force

Brute Forces Any Facebook Account's Phone Number if it Got a Linked Phone in it. + Saves All Acounts with their Phone Number Until it Reaches Targets Phone Number its a 2 in 1 Tool Usage Info You Should Only Know The Country Code of The Target and You Should Own a Facebook Account 1.Country Code=...

CountryTraceRoute v1.22 - Fast Traceroute with IP country information

CountryTraceRoute is a Traceroute utility, similar to the tracert tool of Windows, but with graphical user interface, and it's also much faster than tracert of Windows. CountryTraceRoute also displays the country of the owner of every IP address found in the Traceroute. After the Traceroute is...

Easy Travel Portal SQl Vulnerable

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Easy Travel Portal SQl Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:2 Price:n/a Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all I...

MyBB HM My Country Flags - SQL Injection

No description provided by source. Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability. If w...