Adobe Photoshop Express - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Adobe Photoshop Express published at the 'play' market has multiple vulnerabilities...

Express News - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Express News published at the 'play' market has multiple vulnerabilities...

EXPRESS - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EXPRESS published at the 'play' market has multiple vulnerabilities...

EXPRESS MOBIL - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EXPRESS MOBIL published at the 'play' market has multiple vulnerabilities...

AdWords Express - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AdWords Express published at the 'play' market has multiple vulnerabilities...

DHL Express Mobile - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application DHL Express Mobile published at the 'play' market has multiple vulnerabilities...

Private Data Disclosure

Overview Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the...

periodicoexpress.com.mx XSS vulnerability

Vulnerable URL: http://www.periodicoexpress.com.mx/nota.php?id=295562%22/%3E%3Csvg/onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 07:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability

Cisco IOS is the operating system developed by Cisco for its network devices.Cisco Wide Area Application Services Express is a Cisco WAAS product that is based on IOS and is integrated into routers to provide application acceleration capabilities as well as to reduce the cost of WAN bandwidth...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

CVE-2016-1347

The CVE-2016-1347 issue affects Cisco IOS with WAAS Express (versions 15.1–15.5). It stems from improper validation of TCP segments in the WAAS Express feature, allowing an unauthenticated remote attacker to force a device reload via a crafted TCP segment, causing a denial of service. Exploitatio...

CVE-2016-1347: Undefined Security Weakness

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability

A vulnerability in the Wide Area Application Services WAAS Express feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of TCP segments. An attacker could exploit this vulnerability...

PT-2016-1575

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.5 Description The vulnerability in the Wide Area Application Services WAAS Express implementation allows remote attackers to cause a denial of service device reload via a crafted TCP segment. This is due to...

Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)

A buffer overflow vulnerability has been reported in Microsoft Outlook Express. The vulnerability is due to an insufficient boundary checking when the vulnerable product processes Network News Transfer Protocol NNTP server responses. An attacker can exploit this vulnerability to inject and execut...

CVE-2016-1992

HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via unspecified vectors...

American Express Notifies of Data Breach

American Express has begun notifying cardholders that their data may have been compromised in a third-party breach. A notification letter filed on March 10 with California’s attorney general indicates that AmEx account numbers, user names and other information including expiration dates may have...

CVE-2016-1991

HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to conduct unspecified "file download" attacks via unknown vectors...