mBank@Net - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application mBank@Net published at the 'play' market has multiple vulnerabilities...

DropBearSSHD 2015.71 - Command Injection

Exploit for linux platform in category remote exploits VuNote ============ Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3116 Version: 0.2 Date: Mar 3rd, 2016 Tag: dropbearsshd xauth command injection may lead to forced-command bypass Overview -------- Name: dropbear...

MarinoBus - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application MarinoBus published at the 'play' market has multiple vulnerabilities...

Health Files - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Health Files published at the 'play' market has multiple vulnerabilities...

Orario - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Orario published at the 'play' market has multiple vulnerabilities...

CoinSpace Bitcoin Wallet - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application CoinSpace Bitcoin Wallet published at the 'play' market has multiple vulnerabilities...

Моя музыка ВКонтакте - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Моя музыка ВКонтакте published at the 'play' market has multiple vulnerabilities...

EFF Alerts - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EFF Alerts published at the 'play' market has multiple vulnerabilities...

Chakra JavaScript Engine: Microsoft Open-Sources the Heart of Edge browser

Microsoft has announced the plans to open source the core components of its "Chakra" – the JavaScript engine behind the new Edge browser – to GitHub code-sharing and collaboration repository next month. The company made this announcement at the JSConf US Last Call conference in Florida this...

Microsoft Open-Sources Tool for Porting iOS Apps to Windows

At its Build developers conference in April this year, Microsoft announced "Project Islandwood" - the "Windows Bridge for iOS" that lets iOS and Android developers port their apps to Windows. Microsoft finally made another surprise move on Thursday by open sourcing an early version of its toolkit...

Packet Sender - The UDP and TCP Network Test Utility

Packet Sender is an open source utility to allow sending and receiving TCP and UDP packets. It is available free no ads / no bundleware for Windows , Mac , and Linux. It can be used for both commercial and personal use license. It's designed to be very easy to use while still providing enough...

[SECURITY] Fedora 20 Update: python-virtualenv-12.0.7-1.fc20

virtualenv is a tool to create isolated Python environments. virtualenv is a successor to workingenv, and an extension of virtual-python. It is written by Ian Bicking, and sponsored by the Open Planning Project. It is licensed under an MIT-style permissive license...

WordPress PHP Event Calendar 1.5 Arbitrary File Upload

Exploit Title: Wordpress PHP Event Calendar Plugin - Arbitrary File Upload Google Dork: inurl:/plugins/php-event-calendar/ Date: 02.04.2015 Exploit Author: CrashBandicot @DosPerl Source Plugin: https://wordpress.org/plugins/php-event-calendar/ Vendor HomePage: http://phpeventcalendar.com/ Version...

WiFiPhisher — Automated Phishing Attacks Against Wi-Fi Networks

A Greek security researcher, named George Chatzisofroniou, has developed a WiFi social engineering tool that is designed to steal credentials from users of secure Wi-Fi networks. The tool, dubbed WiFiPhisher, has been released on the software development website GitHub on Sunday and is freely...

Croogo 2.0.0 - Arbitrary PHP Code Execution

Croogo 2.0.0 - Arbitrary PHP Code Execution !/usr/bin/env python Croogo 2.0.0 Arbitrary PHP Code Execution Exploit Vendor: Fahad Ibnay Heylaal Product web page: http://www.croogo.org Affected version: 2.0.0 Summary: Croogo is a free, open source, content management system for PHP, released under...

Croogo 2.0.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

------------------------ XSS 1 -------- POST parameters: - dataContacttitle ------------------------ input type="hidden"...

Croogo 2.0.0 Cross Site Scripting

------------------------ XSS 1 -------- POST parameters: - dataContacttitle ------------------------ input type="hidden" name="dataTokenkey" value="2627e9e2...

Croogo 2.0.0 Arbitrary PHP Code Execution

!/usr/bin/env python Croogo 2.0.0 Arbitrary PHP Code Execution Exploit Vendor: Fahad Ibnay Heylaal Product web page: http://www.croogo.org Affected version: 2.0.0 Summary: Croogo is a free, open source, content management system for PHP, released under The MIT License. It is powered by CakePHP MV...

Fedora Update for python-virtualenv FEDORA-2013-14902

Check for the Version of python-virtualenv OpenVAS Vulnerability Test Fedora Update for python-virtualenv FEDORA-2013-14902 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 19 Update: python-virtualenv-1.10.1-1.fc19

virtualenv is a tool to create isolated Python environments. virtualenv is a successor to workingenv, and an extension of virtual-python. It is written by Ian Bicking, and sponsored by the Open Planning Project. It is licensed under an MIT-style permissive license...