OBD Car Doctor - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application OBD Car Doctor published at the 'play' market has multiple vulnerabilities...

Battery Saver - Battery Doctor - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Battery Saver - Battery Doctor published at the 'play' market has multiple vulnerabilities...

Lybrate - Consult a Doctor - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Lybrate - Consult a Doctor published at the 'play' market has multiple vulnerabilities...

indianhealthguru.com XSS vulnerability

Vulnerable URL: http://www.indianhealthguru.com/Doctor-Enquiry-form.php?DrName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1176500...

creditdoctorcompany.com XSS vulnerability

Vulnerable URL: https://www.creditdoctorcompany.com/info-alert.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/Vision/Eye-Exams-Eye-Glasses/LA-QUINTA-CA/?Name="=25=61 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/xss/?City==MN1"=10=29 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22126 Google Pageran...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/45645ee/?City==MN1"=10=29 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22126 Google...

First widely distributed Android bootkit Malware infects more than 350,000 Devices

In the last quarter of 2013, sale of a Smartphone with ANDROID operating system has increased and every second person you see is a DROID user. A Russian security firm 'Doctor Web' identified the first mass distributed Android bootkit malware called 'Android.Oldboot', a piece of malware that's...

CVE-2013-6945

The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw."...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

Android Malware that can DDoS Attacks from your smartphone

The Russian anti-virus vendor Doctor Web has found a new malicious program for Android which allows hacker groups to carry out mobile denial of service attacks. While it's not entirely clear how the Trojan is spread, researchers suspect that the attackers use social engineering tactics since the...

Android Malware that can DDoS Attacks from your smartphone

The Russian anti-virus vendor Doctor Web has found a new malicious program for Android which allows hacker groups to carry out mobile denial of service attacks. While it’s not entirely clear how the Trojan is spread, researchers suspect that the attackers use social engineering tactics since the...

Cross Platform Trojan steals Linux and Mac OS X passwords

Russian anti-virus company Doctor Web reported about the first cross-platform backdoor to run under Linux and Mac OS X identified as "BackDoor.Wirenet.1". This malicious program designed to steals passwords entered by the user in Opera, Firefox, Chrome, and Chromium, and passwords stored by such...

Tencent QQ Doctor <= 3.2 ZwSetInformationFile Filter Kernel Mode D.O.S Vulnerability

Tencent QQ Doctor Kernel Mode Driver direct using ZwSetInformationFileFileDispostionInformation-FileInformation without any memory validate . 1.03.2 unistall QQ Doctor HMODULE hlib = GetModuleHandle"ntdll.dll"; PVOID pZwSetInformationFile = GetProcAddresshlib , "ZwSetInformationFile"; asm push 0x...

HTML Email Creator <= 2.1b668 (html) Local SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator = 2.1 build 668 html Local SEH Overwrite Exploit Vendor:...

Destiny Media Player 1.61 (lst File) Local Buffer Overflow Exploit #5

Exploit for unknown platform in category local exploits ===================================================================== Destiny Media Player 1.61 lst File Local Buffer Overflow Exploit 5 ===================================================================== print...

faqmanager-sql.txt

+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...