Music Flow Bluetooth - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Music Flow Bluetooth published at the 'play' market has multiple vulnerabilities...

Light Flow Legacy - Dangerous filesystem permissions, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Light Flow Legacy published at the 'play' market has multiple vulnerabilities...

Polar Flow - Activity & Sports - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Polar Flow - Activity & Sports published at the 'play' market has multiple vulnerabilities...

Flow by Ticketscript - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Flow by Ticketscript published at the 'play' market has multiple vulnerabilities...

Scandit Flow - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Scandit Flow published at the 'play' market has multiple vulnerabilities...

Jsprime - A JavaScript Static Security Analysis Tool

Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for applications, be it on the web or on the mobile; be it on client-side, be it on the server side...

Zomato: Authentication Bypassing and Sensitive Information Disclosure on Verify Email Address in Registration Flow

The zomato.com web application is vulnerable to authentication bypassing and sensitive information disclosure. The flaw exist in “Verify Email Address” link which is received in a mail after registration. Once the user enters Full Name, Email Address and Password during registration, he/she is...

Internet Bug Bounty: Type confusion in partial.setstate, partial_repr, partial_call leads to memory corruption, reliable control flow hijack

See my official writeups here: http://bugs.python.org/issue25944 http://bugs.python.org/issue25945 The maintainers merged these bug reports. In one case, the type confusion leads to a reliable control of the instruction pointer as calling repr on a corrupted partial calls a function pointer that ...

Stable Channel Update

The stable channel has been updated to 48.0.2564.109 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library...

SUSE SLED11 Security Update : Recommended update for LibreOffice (SUSE-SU-2016:0324-1)

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ - LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module...

Apache Httpd < 2.4.20 : mod_http2: denial of service by thread starvation

By manipulating the flow control windows on streams, a client was able to block server threads for long times, causing starvation of worker threads. Connections could still be opened, but no streams where processed for these. This issue affected HTTP/2 support in 2.4.17 and 2.4.18...

SUSE-SU-2016:0324-1 Recommended update for LibreOffice

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module,...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

kingdee /kingdee/flow_performance/下6个文件存在SQL盲注漏洞

No description provided by source...

Capturing and Analyzing Network Flow Data: Joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. Joy is a BSD-licensed libpcap-based software package for extracting data features from live network traffic or packet capture pcap files, using a flow-oriented mod...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...

Sandboxed Execution Environment: SEE

Sandboxed Execution Environment SEE is a framework for building test automation in secured Environments. The Sandboxes, provided via libvirt, are customizable allowing high degree of flexibility. Different type of Hypervisors Qemu, VirtualBox, LXC can be employed to run the Test Environments...

Stable Channel Update

The stable channel has been updated to 47.0.2526.80 for Windows, Mac, and Linux. This release contains an update to Adobe Flash Player 20.0.0.228 and security fixes. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with ...

Bohatei - Flexible and Elastic DDoS Defense

Bohatei is a first of its kind platform that enables flexible and elastic DDoS defense using SDN and NFV. The repository contains a first version of the components described in the Bohatei paper, as well as a web-based User Interface. The backend folder consists of : an implementation of the...

Neos CMS 2.0.3 Cross Site Scripting / Shell Upload

Exploit Title: Neos/Flow multiple vulnerabilities Date: 24/11/2015 Author: Mickael Dorigny @ Synetis Vendor or Software Link: https://www.neos.io/ Version: = 2.0.3 Category: Multiple Vulnerabilities Tested on : Neos 2.0.3 Neos/Flow Content Application Platform description :...