WordPress Pondol Form to Mail Plugin <= 1.1 - Cross Site Scripting (XSS)

Because of this vulnerability, the variable itemid appears to send unsanitized data back to the users browser. Vulnerable file is pondol-formmail/pages/admin-mail-info.php. Solution Update the plugin...

CVE-2016-0712

Cross-site scripting XSS vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to portal...

PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities

Exploit for php platform in category web applications Overview ======== Technical Risk: high Likelihood of Exploitation: medium Credits: Discovered and researched by Orwelllabs CVE-Number: N/A DWF: Submited Adivisory URL: http://www.orwelllabs.com/2016/02/planet-ip-surveillance-camera-local.html ...

Network Signal Info - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Network Signal Info published at the 'play' market has multiple vulnerabilities...

Glob - Traffic Info and Radars - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glob - Traffic Info and Radars published at the 'play' market has multiple vulnerabilities...

Ship Info - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ship Info published at the 'play' market has multiple vulnerabilities...

Flughafen Info - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Flughafen Info published at the 'play' market has multiple vulnerabilities...

Faplino - DVB Info Dresden - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Faplino - DVB Info Dresden published at the 'play' market has multiple vulnerabilities...

System Info for Android - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application System Info for Android published at the 'play' market has multiple vulnerabilities...

hr-iNFO - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application hr-iNFO published at the 'play' market has multiple vulnerabilities...

francetv info - Customized SSL, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application francetv info published at the 'play' market has multiple vulnerabilities...

Patron Info System SQL Injection

Document Title: =============== Patron Info System - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1784 Release Date: ============= 2016-03-21 Vulnerability Laboratory ID VL-ID: ==================================== 1784 Comm...

Patron Info System - SQL Injection Vulnerability

No description provided by source...

Patron Info System - SQL Injection Vulnerability

Document Title: =============== Patron Info System - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1784 Release Date: ============= 2016-03-21 Vulnerability Laboratory ID VL-ID: ==================================== 1784 Comm...

Patron Info System - SQL Injection Vulnerability

Document Title: =============== Patron Info System - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1784 Release Date: ============= 2016-03-21 Vulnerability Laboratory ID VL-ID: ==================================== 1784 Comm...

FreeBSD : openssh -- command injection when X11Forwarding is enabled (e4644df8-e7da-11e5-829d-c80aa9043978)

The OpenSSH project reports : Missing sanitisation of untrusted input allows an authenticated user who is able to request X11 forwarding to inject commands to xauth1. Injection of xauth commands grants the ability to read arbitrary files under the authenticated user's privilege, Other xauth...

DEBIAN-CVE-2016-2790

The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown othe...

X (Formerly Twitter): DOMXSS in Tweetdeck

Hi, I would like to report a DOMXSS issue in TweetDeck. Details In Tweetdeck, a tweet contains info of what client app the user used to sent the tweet. The render process is vulnerable to DOMXSS. In https://ton.twimg.com/tweetdeck-web/web/dist/bundle.6f91b4e832.js, the following line is responsib...

secure.shambhala.info XSS vulnerability

Vulnerable URL: https://secure.shambhala.info/database/?page=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

qmp3.info XSS vulnerability

Vulnerable URL: http://qmp3.info/mp3/%3Csvg%20onload=alert%28'XSSPOSED'%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 609190 Google Pagerank| 0 VIP...