Fit ohne Geräte - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Fit ohne Geräte published at the 'play' market has multiple vulnerabilities...

Open Fit: Open Source Gear Fit - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Open Fit: Open Source Gear Fit published at the 'play' market has multiple vulnerabilities...

30 Day Fit Challenges Workout - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Fit Challenges Workout published at the 'play' market has multiple vulnerabilities...

Founder Fetion Handles FIT File Buffer Overflow Vulnerability

Positive Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Founder Electronics Co. A buffer overflow vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit the vulnerability to construct a malformed...

Founder Fetion Handles FIT File Memory Corruption Vulnerability

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows attackers to exploit the vulnerability to construct...

Founder's FIT Handling FIT File Memory Corruption Vulnerability (CNVD-2016-12759)

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit the vulnerability to construct a...

Founder's FIT Handling FIT File Memory Corruption Vulnerability (CNVD-2016-12758)

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit the vulnerability to construct a...

Founder's FIT Handling FIT File Memory Corruption Vulnerability (CNVD-2016-12760)

Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which could be exploited by an attacker to construct a malformed FIT...

SIMOGEO FileManager 2.3.0 Path Traversal

Exploit Title: SIMOGEO FileManager 2.3.0 - Path Traversal Vulnerability Date: 2015-12-09 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: https://github.com/simogeo/Filemanager Software Link: git clone http://github.com/simogeo/Filemanager.git Version: 2.3.0...

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by processing the value of the gridFitType property...

fit-z.de XSS vulnerability

Vulnerable URL: https://www.fit-z.de/fitz/suche.htm?suchBegriff=asd";alert'XSSPOSED'//asd&fitzSucheSubmit.x;=0&fitzSucheSubmit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:30 GMT Vulnerability type:| XSS Vulnerability status:| Public...

Microsoft Windows HTA (HTML Application) - Remote Code Execution Exploit

Microsoft Windows HTA HTML Application remote code execution exploit that leverages MS14-064. !/usr/bin/php poc'."\n\n"; $reza = socketcreateAFINET, SOCKSTREAM, 0 or die'Failed to create socket!'; socketbind$reza, 0,$port; socketlisten$...

MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution

No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...

[Acunetix Web Vulnerability Scanner 8] Automated Web Application Security Testing Tool

Acunetix W eb V ulnerability S canner WVS is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive...

[USN-1559-1] GIMP vulnerabilities

========================================================================== Ubuntu Security Notice USN-1559-1 September 10, 2012 gimp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : gimp vulnerabilities (USN-1559-1)

Joseph Sheridan discovered that GIMP incorrectly handled certain malformed headers in FIT files. If a user were tricked into opening a specially crafted FIT image file, an attacker could cause GIMP to crash. CVE-2012-3236 Murray McAllister discovered that GIMP incorrectly handled malformed KiSS...

Ubuntu Update for gimp USN-1559-1

Ubuntu Update for Linux kernel vulnerabilities USN-1559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15591.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for gimp USN-1559-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1559-1: GIMP vulnerabilities

Joseph Sheridan discovered that GIMP incorrectly handled certain malformed headers in FIT files. If a user were tricked into opening a specially crafted FIT image file, an attacker could cause GIMP to crash. CVE-2012-3236 Murray McAllister discovered that GIMP incorrectly handled malformed KiSS...

Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

SuSE 10 Security Update : Gimp (ZYPP Patch Number 8219)

This update of Gimp fixed a NULL pointer dereference flaw in the fit format handler. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid61453; scriptversion"1.4";...