Researchers Warn of Cyber Weapons Used by Lazarus Group's Andariel Cluster

The North Korean threat actor known as Andariel has been observed employing an arsenal of malicious tools in its cyber assaults against corporations and organizations in the southern counterpart. "One characteristic of the attacks identified in 2023 is that there are numerous malware strains...

PT-2022-2444

Name of the Vulnerable Software and Affected Versions Sophos Firewall versions prior to v18.5 MR3 18.5.3 Sophos XG Firewall version 17.0.10 MR-10 Description An authentication bypass issue exists in the User Portal and Webadmin components of Sophos Firewall, potentially allowing a remote attacker...

dairygoatworld.com Cross Site Scripting vulnerability OBB-2282552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Goat City Rampage 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Goat City Rampage 3D published at the 'play' market has multiple vulnerabilities...

Goat Farm Animated 3D Piano - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Goat Farm Animated 3D Piano published at the 'play' market has multiple vulnerabilities...

Mountain Goat Mountain - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mountain Goat Mountain published at the 'play' market has multiple vulnerabilities...

Crazy Goat FREE - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Goat FREE published at the 'play' market has multiple vulnerabilities...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

CVE-2014-6778

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6778

The CVE-2014-6778 entry concerns The Goat Forum (com.gcspublishing.goatspot) Android app, version 3.9.15, which does not verify X.509 certificates from SSL servers. This lack of certificate validation permits man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a craf...

CVE-2014-6778

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7456

Name of the Vulnerable Software and Affected Versions The Goat Forum aka com.gcspublishing.goatspot version 3.9.15 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

CVE-2014-6778: Undefined Security Weakness

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Unfixed XSS vulnerability at www.alaminosgoatfarm.com

Security researcher Milisx, has submitted on 14/07/2009 a cross-site-scripting XSS vulnerability affecting www.alaminosgoatfarm.com, which at the time of submission ranked 7591055 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It i...

CVE-2009-1454

CVE-2009-1454 is an XSS in WebCollab’s tasks.php prior to version 2.50 (aka Billy Goat). The issue allows remote attackers to inject arbitrary script/HTML via the selection parameter in a todo action. Affected: WebCollab before 2.50. Impact (per available data): client-side script execution with ...