Fingerprint Lockscreen PRANK - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lockscreen PRANK published at the 'play' market has multiple vulnerabilities...

Fingerprint for GalaxyS6-Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint for GalaxyS6-Prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock Screen- Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock Screen- Prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock Screen Prank - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock Screen Prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock Screen Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock Screen Prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock KitKat prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock KitKat prank published at the 'play' market has multiple vulnerabilities...

Fingerprint Lock Screen Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint Lock Screen Prank published at the 'play' market has multiple vulnerabilities...

Fingerprint love calculator - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fingerprint love calculator published at the 'play' market has multiple vulnerabilities...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

Thousand electronic safe actually so that you is open a-vulnerability warning-the black bar safety net

! With the electronic safe of the popularity, now there are more and more people began to pay attention to the electronic safe security recently security researchers exposed a crack electronic safe method, the following will take a look at it. Cheap attack high-return A safety Deposit box there a...

Jenkins 低权限用户 API 服务调用 可致远程命令执行

漏洞演示 将 Jenkins 跑起来后，在低权限用户下构造 XML 文档： hashCode open /Applications/Calculator.app false 0 0 0 start 1 发送 Payload 至接口 http://...:8080/jenkins/createItem?name=knownsec： 成功后服务端会运行 计算器 程序。 漏洞影响 影响版本： 1.650 （1.650版本已修复该问题） 从zoomeye.org上搜索设备指纹“Jenkins” 从搜索的结果来看，约存在20000个潜在受到影响的目标。 相关链接...

FingerTec Fingerprint Reader - Remote Access and Remote Enrolment

FingerTec Fingerprint Reader - Remote Access and Remote Enrolment Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access...

FingerTec Fingerprint Reader - Remote Access and Remote Enrolment

Exploit Title: Default Root Password and Remote Enrollment on FingerTec Devices Date: 12-01-2016 Exploit Author: Daniel Lawson Contact: http://twitter.com/fang0654 Website: https://digital-panther.com Category: physical access control 1. Description Almost all FingerTec Access Control devices are...

Design/Logic Flaw

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request...

CVE-2015-5317

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request...

CVE-2015-5317

CVE-2015-5317 affects Jenkins CloudBees Jenkins Fingerprints pages. Affected products: Jenkins before 1.638 and LTS before 1.625.2. The vulnerability is an information disclosure in the Fingerprints UI that allows remote attackers to obtain sensitive job and build names via a direct request. The ...

Wirecard Checkout Page 1.0 Price Manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2015-061 Product: Wirecard Checkout Page Manufacturer: Wirecard AG Affected Versions: 1.0 Tested Versions: 1.0 Vulnerability Type: Improper Validation of Integrity Check Value CWE-354 Risk Level: High Solution Status: Fixed...

This Guy Builds A Thor-Like Hammer that Only He Can Pick Up

If you have watched the most recent Avengers movie, then you would be aware of a scene where all the superheroes Iron Man, War Machine, Hawkeye, and Captain America take turns to lift Thor’s hammer but fail. Someone has an explanation, Why? Inspired by Thor's legendary hammer Mjolnir that is not...

Oracle: Security Advisory (ELSA-2015-0800)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sonar.js - Framework for identifying and launching exploits against internal network hosts

A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar.js will u...