TimeZapp - Die Frage-App - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TimeZapp - Die Frage-App published at the 'play' market has multiple vulnerabilities...

360° online – Die App - Corrupted files, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 360° online – Die App published at the 'play' market has multiple vulnerabilities...

Der Die Das - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Der Die Das published at the 'play' market has multiple vulnerabilities...

die-waescherei.de XSS vulnerability

Vulnerable URL: http://die-waescherei.de/Suche?suchtext=asd"=Suchen Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1310216 Google Pagerank| 2 VIP website...

Wordpress auto-thickbox-plus plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin auto-thickbox-plus XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/auto-thickbox-plus/ Google dork: inurl:/wp-content/plugins/auto-thickbox-plus The code in...

die-weingalerie.ch XSS vulnerability

Vulnerable URL: http://www.die-weingalerie.ch/shop/cem/search/?query="';-- Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2163605 Google Pagerank| 2 VIP...

ratgeber.die-stromsparinitiative.de XSS vulnerability

Open Bug Bounty ID: OBB-53073 Description| Value ---|--- Affected Website:| ratgeber.die-stromsparinitiative.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

PrisonLocker Ransomware Emerges From Criminal Underground

Security researchers from Malware Must Die uncovered new ransomware called PrisonLocker, and said the malware author is either a legitimate security researcher or is posing as one via a personal blog and Twitter handle. Malware Must Die has monitored PrisonLocker’s development since spotting it f...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...

Plugins Dll Hijacking Exploit

Exploit for windows platform in category local exploits ============================= Plugins Dll Hijacking Exploit ============================= Exploit Title: Dll Hijacking Exploit Application: Application plugin support Date: 07 Sept 2010 Author: STRELiTZIA Version: %Applications list% Tested...

Savant 3.1 Web Server Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Savant/3.1/ include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'Savant 3.1 Web Server...

cpCommerce 1.2.x File Inclusion

!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...

cpCommerce 1.2.x GLOBALS[prefix] Arbitrary File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit ================================================================= !/usr/bin/perl cpCommerce 1.2.x GLOBALSpref...

Ubuntu Update for firefox, firefox-3.0, xulrunner-1.9 vulnerabilities USN-667-1

Ubuntu Update for Linux kernel vulnerabilities USN-667-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6671.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox, firefox-3.0, xulrunner-1.9 vulnerabilities USN-667-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Forced mouse drag — Mozilla

Mozilla developer Paul Nickerson reported a variant of a click-hijacking vulnerability discovered in Internet Explorer by Liu Die Yu. The vulnerability allowed an attacker to move the content window while the mouse was being clicked, causing an item to be dragged rather than clicked-on. This issu...

SA-2008-006 - Drupal core - Cross site scripting (UTF8)

When outputting plaintext Drupal strips potentially dangerous HTML tags and attributes from HTML, and escapes characters which have a special meaning in HTML. This output filtering secures the site against cross site scripting attacks via user input. Certain byte sequences that are invalid in the...

SA-2007-029 - Drupal core - User deletion cross site request forgery

The Drupal Forms API protects against cross site request forgeries CSRF, where a malicous site can cause a user to unintentionally submit a form to a site where he is authenticated. The user deletion form does not follow the standard Forms API submission model and is therefore not protected again...

security flaw

The dieifkernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compiled with certain versions of gcc, has the "noreturn" attribute set, which allows local users to cause a denial of service by causing user faults on Itanium systems...

phpBB <= 2.0.18 Remote Bruteforce/Dictionary Attack Tool (updated)

No description provided by source. !/usr/bin/perl Title: PhpBB = 2.0.18 Remote Bruteforce/Dictionary Attack Tool Type: Bruteforce / Dictionary attack New demo: http://rapidshare.de/files/13694254/phpbbbtr.avi.html 1.06 mb Php Email Script data: ? mail$destinataire, $objet, $contenu, "From:...

Low: Red Hat Security Advisory: gdb security update

An updated gdb package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them i...