Uber: [experience.uber.com] Node.js source code disclosure & anonymous access to internal Uber documents, templates and tools

A configuration file on experience.uber.com exposed details for the server configuration as well as information about the content hosted on the site. The site itself did require authentication to log in, but this config file was publicly accessible. Other accessible URLs included slide deck...

Duckie Deck SandwichChef Lite - Base64 encoded String, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Duckie Deck SandwichChef Lite published at the 'play' market has multiple vulnerabilities...

Duckie Deck Monsters - BSD license, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Duckie Deck Monsters published at the 'play' market has multiple vulnerabilities...

Duckie Deck Baby Tunes - BSD license, Base64 encoded String, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Duckie Deck Baby Tunes published at the 'play' market has multiple vulnerabilities...

Deck Heroes: Duel des Ténèbres - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Deck Heroes: Duel des Ténèbres published at the 'play' market has multiple vulnerabilities...

Deck Heroes: Legacy - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Deck Heroes: Legacy published at the 'play' market has multiple vulnerabilities...

Tech Deck Skateboarding - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tech Deck Skateboarding published at the 'play' market has multiple vulnerabilities...

Magic: Deck Builder - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Magic: Deck Builder published at the 'play' market has multiple vulnerabilities...

X (Formerly Twitter): Tweet Deck XSS- Persistent- Group DM name

Hello Group names in tweetdeck.twitter.com aren't filtered properly, giving scope for Cross site vulnerability attacks. Challenge I have faced while escalating the xss: - group name can only be 9 character long. How i bypassed it: Set multiple group names with different payloads, which means we c...

daiquirideck.com XSS vulnerability

Vulnerable URL: http://www.daiquirideck.com/madeira/? Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7020942 Google Pagerank| 3 VIP website status:| No...

Hardcoded credentials

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

CVE-2014-0326

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

PT-2014-3559

Name of the Vulnerable Software and Affected Versions Iridium satellite terminals affected versions not specified Description The issue allows remote attackers to read hardcoded credentials via the web interface on the Pilot Below Deck Equipment BDE and OpenPort implementations. Recommendations A...

CVE-2014-0326: Undefined Security Weakness

The Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface...

CVE-2014-0327: Undefined Security Weakness

The Terminal Upgrade Tool in the Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321...

Light Audio Mixer 1.0.12 - (.wav) Crash PoC

No description provided by source. Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

Light Audio Mixer 1.0.12 Crash

Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

Light Audio Mixer 1.0.12 - '.wav' Crash (PoC)

Exploit Title: Light Audio Mixer Version 1.0.12 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Light-Audio-Mixer/3000-21394-10791607.html Version: 1.0.12 Tested on: Windows XP sp3...

July 2013 Security Bulletin Webcast, Q&A, and Slide Deck

Today we’re publishing the July 2013 Security Bulletin Webcast Questions & Answers page. During the webcast, we fielded 10 questions covering all updates. All questions are included on the Q&A page. We invite our customers to join us for the next scheduled webcast on Wednesday, August 14th at 11...

June 2013 Security Bulletin Webcast, Q&A, and Slide Deck

Today we’re publishing the June 2013 Security Bulletin Webcast Questions & Answers page. We fielded three questions during the webcast, with specific questions focusing primarily on Windows Print Spooler MS13-050, Microsoft Office MS13-051, and the security advisory addressing digital certificate...