Uh-Oh! Pokémon GO grants itself 'Full Access' to your Google Account — Fix It NOW

Nintendo's new location-based augmented reality game Pokémon GO has been making rounds since its launch just a few days ago. People are so excited to catch 'em all that brought Nintendo's market-value gains to $7.5 Billion £5.8 Billion in just two days – the highest surge since 1983. Due to the...

Sunny WebBox Hardcoded Credentials (HTTP)

Sunny WebBox is using known hardcoded credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EasyCafe Server <= 2.2.14 Remote File Read Vulnerability - Active Check

EasyCafe Server is prone to a remote file read vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Shopify: A 'Full access' administrator is able to see the shop owners user details

Description ==== A 'Full access' administrator is usually forbidden to see the shop owners user profile. But the endpoint shop.myshopify.com/admin/users.json does disclose the shop owners profile. As the user listing includes all fields of users this does leak the user details of the shop owner. ...

Moker RAT Bypassing Security Measures, Evading Detection

Researchers warned Tuesday the latest APT to make the rounds features a remote access Trojan that can effectively mitigate security measures on machines and grant the attacker full access to the system. Experts with the Israeli cyber security start-up enSilo discovered the RAT – which they refer ...

Vulnerability: CVE-2 0 1 5-0 9 3 2-vulnerability warning-the black bar safety net

ANTLabs is a very popular gateway device. It is usually installed in hotels, conference centres and other places for guests to provide WIFI service. It is usually tied in a room for billing purposes. If you are in a hotel Use it, then you should be especially familiar with such devices...

NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications product: NetIQ Access Manager vulnerable version: 4.0 SP1 fixed version: 4.0 SP1 Hot Fix 3 CVE number: CVE-2014-5214, CVE-2014-5215, CVE-2014-5216, CVE-2014-5217 impact: High homepage: https://www.netiq.com/ found: 2014-10-29 by: W. Ettlinger...

Siedle Door Controller Default Credentials (HTTP)

The remote Siedle Door Controller is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

OracleBI Discoverer 10.1.2.48.18 Cross Site Scripting

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: OracleBI Discoverer Ver 10.1.2.48.18 - Full...

SimogeoFilemanager Upload File Vulnerability

Exploit for php platform in category web applications RoxTeam Italian Hackers And Security Team 2012 Exploit Title: SimogeoFilemanager Upload File Vulnerability Date: 09/02/2012 Author: hack Author Email: RoxSecurityTeamatcomdothotmail.it Category: webapps Risk: Higt Vendor or Software Link:...

Nmap NSE net: netbus-auth-bypass

Checks if a NetBus server is vulnerable to an authentication bypass vulnerability which allows ful access without knowing the password. For example a server running on TCP port 12345 on localhost with this vulnerability is accessible to anyone. An attacker could simply form a connection to the...

netbus-auth-bypass NSE Script

Checks if a NetBus server is vulnerable to an authentication bypass vulnerability which allows full access without knowing the password. For example a server running on TCP port 12345 on localhost with this vulnerability is accessible to anyone. An attacker could simply form a connection to the...

tftp desktop 2.5 - Directory Traversal

tftp desktop 2.5 - Directory Traversal +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Security Best Practice: Protect Yourself from Multiple SMTP Vulnerabilities

Simple Mail Transfer Protocol SMTP is an Internet standard for electronic mail e-mail transmission across Internet Protocol IP networks. SMTP is specified for outgoing mail transport and uses TCP port 25. There are several serious security limitations with the SMTP protocol that allow malicious...

Linux/x86 - edit /etc/sudoers for full access - 86 bytes

No description provided by source. / Author: Rick Email: [email protected] OS: Linux/x86 Description: Anyone can run sudo without password section .text global start start: ;open"/etc/sudoers", OWRONLY | OAPPEND; xor eax, eax push eax push 0x7372656f push 0x6475732f push 0x6374652f mov ebx, es...

Vulnerabilities in WOSendNews

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Cross-Site Scripting уязвимостях в WOSendNews. Information Leakage + Full access: При запросе по адресу http://site/path/pass.dat доступны логин и пароль админа. С логином и паролем получается полный доступ к админке, с...

linux/x86 edit /etc/sudoers for full access 86 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 edit /etc/sudoers for full access 86 bytes ==================================================== / Author: Rick Email: email protected OS: Linux/x86 Description: Anyone can run sudo...

linux/x86 edit /etc/sudoers for full access 86 bytes

No description provided by source. / Author: Rick Email: [email protected] OS: Linux/x86 Description: Anyone can run sudo without password section .text global start start: ;open"/etc/sudoers", OWRONLY | OAPPEND; xor eax, eax push eax push 0x7372656f push 0x6475732f push 0x6374652f mov ebx, es...

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...

FreeBSD : sql-ledger -- security bypass vulnerability (8e02441d-d39c-11db-a6da-0003476f14d3)

Chris Travers reports : George Theall of Tenable Security notified the LedgerSMB core team today of an authentication bypass vulnerability allowing full access to the administrator interface of LedgerSMB 1.1 and SQL-Ledger 2.x. The problem is caused by the password checking routine failing to...