CVE-2016-5814

CVE-2016-5814 is a classic buffer overflow in Rockwell RSLogix products (Micro Starter Lite/Dveloper; RSLogix 500 Starter/Standard/Professional) triggered by parsing malicious RSS project files. The vulnerability is a CWE-120 flaw that allows code execution when a local user opens a crafted RSS f...

Rockwell Automation RSLogix Micro Starter Lite Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Rockwell Automation RSLogix Micro Starter Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting

Overview Splunk Enterprise and Splunk Lite contain a stored cross-site scripting vulnerability CWE-79. Note that this vulnerability is different from JVN74244518. Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#71462075: Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting

Splunk Enterprise and Splunk Lite contain a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser by an attacker who can log-in to the system as an administrator. Solution Update the Software Update to the latest version according t...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

Intercepting Proxy for Performing Web Application Security Testing: The Pappy Proxy

Intercepting Proxy for Performing Web application security testing The Pappy P roxy A ttack P roxy P rox Y Proxy is an intercepting proxy for performing web application security testing. Its features are often similar, or straight up rippoffs from Burp Suite . However, Burp Suite is neither open...

WordPress wSecure Lite Plugin Remote Command Execution

A remote code execution vulnerability exists in WordPress wSecure Lite Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress wSecure Lite Plugin <= 2.3 - Remote Code Execution

This plugin is prone to a remote code execution vulnerability, that allows a hacker to do just about anything on a website. Solution Update the plugin...

Kate Mobile Lite для ВКонтакте - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Kate Mobile Lite для ВКонтакте published at the 'play' market has multiple vulnerabilities...

WordPress Pretty Link Lite Plugin <= 1.6.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade plugin...

WordPress MemberSonic Lite Plugin <= 1.2 - Authentication BYPASS

Because of this vulnerability, an unauthorized user can login to any account by knowing the email address, which is associated with the account. Solution Update the plugin...

MemberSonic Lite <= 1.2 - Authentication Bypass

The membersonic-lite WordPress plugin was affected by an Authentication Bypass security vulnerability...

VirIT Explorer Lite / Pro 8.1.68 Privilege Escalation

/ Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Tested on: Windows 7 CVE: TBD CVSS v2: 6.8...

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation / Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro...

VirIT Explorer Lite & Pro 8.1.68 - Local Privilege Escalation

/ Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Tested on: Windows 7 CVE: TBD CVSS v2: 6.8...

Htcap - web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes

htcap is a web application scanner able to crawl single page application SPA in a recursive manner by intercepting ajax calls and DOM changes. Htcap is not just another vulnerability scanner since it's focused mainly on the crawling process and uses external tools to discover vulnerabilities. It'...

Facebook Lite - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Lite published at the 'play' market has multiple vulnerabilities...

Exploration Lite - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Exploration Lite published at the 'play' market has multiple vulnerabilities...

Christmas Gifts Lite - External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Gifts Lite published at the 'play' market has multiple vulnerabilities...

Talking Moya Hutos Lite - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Moya Hutos Lite published at the 'play' market has multiple vulnerabilities...