CVE-2016-6856

Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...

CVE-2016-6856

Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...

Yahoo Flaw Allowed Hackers to Read Anyone's Emails

Yahoo has patched a critical security vulnerability in its Mail service that could have allowed an attacker to spy on any Yahoo user's inbox. Jouko Pynnönen, a Finnish Security researcher from security firm Klikki Oy, reported a DOM based persistent XSS Cross-Site Scripting in Yahoo mail, which i...

PizzaInn Beta 3 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - message-exec.php - CSRF Send Inbox Message. Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email...

PizzaInn Beta 3 message-exec.php Cross Site Request Forgery

Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - message-exec.php - CSRF Send Inbox Message. Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork...

Legal Robot: Email spoofing-fake mail from your mail domain server

Hiii THERE Vulnerability Title There are few email spoofing tool is available free.one them is http://emkei.cz/ Description when I tried to send a email from [email protected] to my email ,it was successful but when i tried to send the another from [email protected] , i did not receive any...

Gratipay: Avoid "resend verification email" confusion

Let's assume Alice has a Gratipay account https://gratipay.com/alice and an [email protected] email 1. Mallory creates an a‎1‎[email protected] email address, base64-encodes it, and sends Alice a link https://gratipay.com/alice/emails/verify.html?email2=YTFpY2VAZm9vLmNvbQ&nonce=x 2. When Alice opens the...

Veris: Email spoofing in [email protected]

Hey, I've found email spoofing vulnerability in [email protected] Issue: ======== When I try to send a fake email from [email protected] to my email [email protected] I was successful in sending a fake email to my inbox, this is an issue; because, fake mails should be sent into the 'spam' folde...

SMS Blocker. Clean Inbox - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Blocker. Clean Inbox published at the 'play' market has multiple vulnerabilities...

Project Arsenal X - As HackTheGame But Real

Project Arsenal X New version of my Arsenal X written in Delphi with the following options: + Gmail Inbox + Whois Client + Table + Downloader + Get IP + Locate IP + K0bra SQLI Scanner + Crack multiple hashes + Search admin panel + Port Scanner + Multi Cracker with support for FTP, TELNET, POP3 +...

Flowdock API Script Insertion

Document Title: =============== Flowdock API Bug Bounty 1 - Description Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1560 Release Date: ============= 2015-09-22 Vulnerability Laboratory ID VL-ID:...

Flowdock API Bug Bounty #1 - Persistent Web Vulnerability

Document Title: =============== Flowdock API Bug Bounty 1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1560 Vulnerability Magazine:...

Flowdock API Bug Bounty #1 - Persistent Web Vulnerability

Document Title: =============== Flowdock API Bug Bounty 1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1560 Vulnerability Magazine:...

AirDroid iOS / Android / Win 3.1.3 - Persistent

Document Title: =============== Airdroid iOS, Android & Win 3.1.3 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1543 Release Date: ============= 2015-07-20 Vulnerability Laboratory ID VL-ID: ==================================...

Whisper: Bypass pin(4 digit passcode on your android app)

i have found that this activities are exported Package: sh.whisper sh.whisper.WMainActivity sh.whisper.WWhisperBrowserActivity sh.whisper.WRelatedActivity sh.whisper.WDiscoverActivity sh.whisper.WCategoryFeedActivity sh.whisper.WSettingsActivity Parent Activity: sh.whisper.WMainV4Activity...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

Fedora 20 : geary-0.6.3-1.fc20 (2014-10451)

Warn user of TLS certificate issues when connecting 713247 - Compile with Vala 0.25 and better Update Geary to the latest stable version 0.6.2. Changes include : - Patch a major memory leak due to GMime bindings - Stabilize search sorting to prevent dropped search results - Prevent Inbox from...

Google Launches User-Friendly 'Inbox' App, Alternative To Gmail

Google is offering its users a completely new and better experience of its mailing service. And in an effort to do this, the company has launched a new email service, an alternative to Gmail, called "Inbox" on Wednesday that aims to make email more useful and preview next-generation capabilities...

FBHT v3.0 - Facebook Hacking Tool (Like flood, Note DDoS attack, FBFriendlyLogout, more...)

FBHTFacebook Hacking Tool is an open-source tool written in Python that exploits multiple vulnerabilities on the Facebook platform The tool provides: 1 Create accounts 2 Delete all accounts for a given user 3 Send friendship requests Test Accounts 4 Accept friendship requests Test Accounts 5...

PHP-Fusion 6.0.109 Messages.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...