Harman-Kardon Uconnect Vulnerability

OVERVIEW This advisory is a follow-up to the ICS-ALERT titled ICS-ALERT-15-203-01 FCA Uconnect VulnerabilityICS-CERT ALERT, https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-203-01, web site last accessed September 17, 2015. that was published July 22, 2015, on the NCCIC/ICS-CERT web site. Chris...

OnePlus DR-1 — World's Smallest $19.99 Drone

Chinese smartphone maker OnePlus who recently announced that the company is planning to launch its latest flying drone, OnePlus DR-1, saying it would be a "Game Changer." There have already been some speculations about a drone from OnePlus circulating on the Internet, but now the company has...

Samsung Patches Social Media Vulnerability in Millions of Devices

Samsung patched a vulnerability last month in SNS Provider, a popular application that manages other social media apps present in millions of its devices. If exploited the bug could have given attackers the ability to access to any personal information users stored on Facebook, LinkedIn and...

AppCrashView - View Application Crashes (.wer files)

AppCrashView is a small utility for Windows Vista and Windows 7 that displays the details of all application crashes occurred in your system. The crashes information is extracted from the .wer files created by the Windows Error Reporting WER component of the operating system every time that a cra...

CVE-2014-7735

The Dr. Sheikh Adnan Ibrahim aka com.amitaff.adnanIbrahim application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7735

The CVE-2014-7735 entry applies to the Android app “Dr. Sheikh Adnan Ibrahim” (com.amitaff.adnanIbrahim) version 1.0, which does not verify X.509 certificates when establishing SSL connections. Root cause: absence of certificate validation allows MITM attackers to spoof servers and read sensitive...

CVE-2014-7461

The CVE-2014-7461 entry identifies the Android app “A King Sperm” (com.wKingSperm) 0.63.13384.23020 as vulnerable because it does not verify X.509 certificates from SSL servers, enabling MitM where an attacker could obtain sensitive information via a crafted certificate. The NVD metrics indicate ...

Wickr Announcement - Bug Bounty Program 2014

Document Title: =============== Wickr Announcement - Bug Bounty Program 2014 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1285 Download: http://www.vulnerability-lab.com/resources/documents/1285.pdf Original:...

Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability

No description provided by source. uploader&downloader v3 Remote SQL Injection Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1892uploader-30.zip Found By: the master exploit:...

J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit

No description provided by source. !/usr/bin/perl Jowamp WebInterface v 2.1 Remote File Inclusion Vulnerablity Vulnerability found & Exploit coded By Dr Max Virus Download:http://www.av.it.pt/jowamp/indexfiles/JOWAMPWebInterfaceversion21.zip User Must Be Logged In! In a web browser open the page...

ESET Smart Security 4.2 and NOD32 Antivirus 4.2 (x32-x64) LZH archive parsing PoC Exploit

No description provided by source. ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH...

phpXD <= 0.3 (path) Remote File Inclusion Vulnerability

No description provided by source. | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:phpxd Affected Version:0.3...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure Vulnerablity

No description provided by source. SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

Dr. Web Control Center 6.00.3.201111300 XSS Vulnerability

No description provided by source. Dr. Web Control Center Admin UI Remote Script Code Injection ============================================================= Affected Products/Versions -------------------------- Product Name: Dr. Web Enterprise Server Version Number: 6.00.3.201111300...

3editor CMS <= 0.42 (index.php) Local File Include Vulnerability

No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...

Powered by iNetScripts: Shell Upload Vulnerability

No description provided by source. ==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploi...

Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability

No description provided by source. !/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1;...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

No description provided by source. ========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1...

Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...