CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

Sql injection

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

CVE-2018-17410

Horus CMS is affected by a SQL Injection vulnerability. Public records cite an injection instance reachable via /busca and /home, implying remote exploitation without authentication. CVSS scores from NVD indicate high to critical impact (CVSS v2 base 7.5; CVSS v3.1 base 9.8). Concrete exploit det...

CVE-2018-17410

Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI...

PTP, IoT & the Norwegian Government

We were privileged to be invited to speak an event in Arendal, Norway yesterday to make the case for IoT regulation. 'Arendalsuka' is the largest political gathering in Norway, an open forum event where the public can interact directly with political leaders, business leaders, entrepreneurs,...

The Horus Heresy: Drop Assault - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Horus Heresy: Drop Assault published at the 'play' market has multiple vulnerabilities...

Eye of Horus BB - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Eye of Horus BB published at the 'play' market has multiple vulnerabilities...