MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities

Document Title: =============== MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=516 Release Date: ============= 2012-04-30 Vulnerability Laboratory ID VL-ID: ==================================== 5...

Mobile Apps Space A 'Wild West' For Enterprises

SAN FRANCISCO – Companies that are hoping to catch a ride on the mobile wave should pay close attention to the application development firms they choose to work with, unless they want to be saddled with a buggy and insecure albatross bearing their corporate logo, a leading application security...

BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...

Sybase M-Business Anywhere (AvantGo) Sync Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo Sync Server, which handles synchronization requests from a mobile device and determines whether to obtain requested pages from the source web server or from a shared cache on the Sync Server itself. C Tenable Network Security, In...

Pandora Mobile App Transmits Gobs Of Personal Data

A popular free mobile application from online music service Pandora.com that is the subject of a Grand Jury investigation into loose data privacy practices in the mobile application market confirms that the application silently sends reams of sensitive data to advertisers. The analysis was...

Default credentials

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

Pandora Mobile Application Detection

Binary data 5200.prm...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

CVE-2008-7238

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

CVE-2008-7238

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

Code injection

Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors...

CVE-2008-2596

Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors...

CVE-2008-2596

CVE-2008-2596 affects Oracle E-Business Suite 12.0.3, Mobile Application Server. Oracle’s E-Business Suite risk matrix lists the vulnerability as exploitable with a valid session over HTTP, with CVSS v2 base score 5.5 (Network, Low access complexity, Single authentication, Confidentiality/Integri...

ac4p Mobile - 'up.php?Taaa' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21427/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

ac4p Mobile - cpindex.php?pagenav Cross-Site Scripting

ac4p Mobile - cpindex.php?pagenav Cross-Site Scripting source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

ac4p Mobile - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

ac4p Mobile - index.php Multiple Cross-Site Scripting Vulnerabilities

ac4p Mobile - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues...

ac4p Mobile - up.php Multiple Cross-Site Scripting Vulnerabilities

ac4p Mobile - up.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...