Cookie Without HttpOnly Flag Detected

The HttpOnly flag assists in the prevention of client side-scripts such as JavaScript from accessing and using the cookie. This can help prevent XSS attacks from targeting the cookies holding the client's session token setting the HttpOnly flag does not prevent, nor safeguard against XSS...

Cross-Site Request Forgery

Cross Site Request Forgery CSRF occurs when an authenticated user is tricked into clicking on a link which would automatically submit a request without the user's consent. This can be made possible when the request does not include an anti-CSRF token, generated each time the request is visited an...

Domain Marketplace Script - SQL Injection

Exploit Title: Domain Marketplace Script - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: http://scripteen.com/ Software: http://scripteen.com/item/scripts/scripteen-domain-marketplace-script.html Demo: http://dwm.domainauctionsscript.com/ Version: N/A Tested on: Win7 x64, Kali...

Threat Outbreak Alert RuleID27649: Email Messages Distributing Malicious Software on February 2, 2017

Medium Alert ID: 52533 First Published: 2017 February 2 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27649 may contain the following files: Name |...

Threat Outbreak Alert RuleID26846: Email Messages Distributing Malicious Software on December 12, 2016

Medium Alert ID: 51076 First Published: 2016 December 12 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26846 may contain the following files: Name |...

comune.torricella.cr.it XSS vulnerability

Vulnerable URL:...

pm.detik.com XSS vulnerability

Vulnerable URL: http://pm.detik.com/?continue=alert'OPENBUGBOUNTY'...

Joomla com_jsjobs SQL injection Vulnerability

Exploit for php platform in category web applications |✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚✚ !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog :...

Threat Outbreak Alert RuleID24808: Email Messages Distributing Malicious Software on September 12, 2016

Medium Alert ID: 48864 First Published: 2016 September 12 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24808 may contain the following files: Name ...

Joomla JSJobs 1.0.7.5 SQL Injection

|\aaaaaaaaaaaaaaaaaaaaaaa !! Exploit Title : Joomla comjsjobs SQL injection Vulnerability !! Exploit Author : xBADGIRL21 !! Dork : inurl:index.php?option=comjsjobs !! Vendor Homepage : http://www.joomsky.com !! MyBlog : http://xbadgirl21.blogspot.com/ !! version : 1.0.7.5 !! Tested on: BackBox !!...

zFTP Client 20061220 - 'Connection Name' Local Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: zFTP Client Affected value: NAME under FTP connection Where in the code: Line 30 in strcpychk.c strcpychk dest=0xb7f811c0 "/KUIP", src=0xb76a6680 "/MACRO",...

BigTree Install Detected

Binary data 9435.prm...

Joomla AI Contact Safe 2.0.20 Shell Upload / SQL Injection

Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link : http://www.algisinfo.com/en/download/category/1-free-extensions.html Vendor Homepage : http://www.algisinfo.com/...

Threat Outbreak Alert RuleID23367: Email Messages Distributing Malicious Software on June 10, 2016

Medium Alert ID: 46643 First Published: 2016 June 10 19:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23367 may contain the following files: Name | Siz...

Yasr 0.6.9-5 Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: General-purpose console screen reader Version: 0.6.9-5 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Yasr is a general-purpose console screen reader for...

Drupal Detected via Update Traffic

Binary data 9208.prm...

Monster Truck Winter Racing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Monster Truck Winter Racing published at the 'play' market has multiple vulnerabilities...

Car in Driving - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Car in Driving published at the 'play' market has multiple vulnerabilities...

Hair Dryer(baby) - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Hair Dryerbaby published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21645: Email Messages Distributing Malicious Software on March 11, 2016

Medium Alert ID: 44088 First Published: 2016 March 11 20:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21645 may contain the following files: Name | Si...