852 matches found
RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)
Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs : OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-too...
Mobile Application Hacking Diary Ep.2
Mobile Application Hacking Diary Ep.2 |=--------------------------------------------------------------------=| |=------------= Mobile Application Hacking Diary Ep.2=--------------=| |=------------------------= 18 February 2018 =----------------------=| |=----------------------= By CWH Underground...
Nootka Command Injection Vulnerability
Nootka is a mobile application for learning classical music notation. A security vulnerability exists in Nootka 1.4.4 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary operating system commands...
Photos in Wifi 1.0.1 - Path Traversal
Document Title: =============== Photos in Wifi 1.0.1 iOS - Path Traversal Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2018-01-04 Vulnerability Laboratory ID VL-ID: ===================================...
Wickr Inc - App Clock & Message Deletion Glitch P2
Document Title: =============== Wickr Inc - App Clock & Message Deletion Glitch P2 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2107 Document: https://www.vulnerability-lab.com/resources/documents/2107.rar Vulnerability Magazine:...
Wickr Inc - App Clock & Message Deletion Glitch P2
Document Title: =============== Wickr Inc - App Clock & Message Deletion Glitch P2 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2107 Document: https://www.vulnerability-lab.com/resources/documents/2107.rar Vulnerability Magazine:...
Mail.ru: XSS на e.mail.ru в мобильном приложении!
Cross application scripting via message content in mobile mail application. Vulnerability affected a limited number of external domains connected in Mail.Ru mail application. Users of Mail.Ru mailboxes and largest mailbox providers were not affected, no access to confidential data was possible as...
CVE-2015-5248
CVE-2015-5248 is a reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. Connected CNVD-2017-33047 describes a related remote attacker could trigger arbitrary code execution by submitting a crafted request that causes code execution when a user opens a...
CVE-2015-5248
Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform...
Mail.ru: XSS в письме, в теле письма.
Здравствуйте! XSS срабатывает на e.mail.ru, m.mail.ru, light.mail.ru и в мобильном приложении. Уязвимость присутствует в параметрах стилей, в ...здесь... срабатывает, если экранировать символы. Рабочий вектор здесь одиночные бэкслэш, в примере ещё ниже хостинг обрезал до одиночных: i\\ Отправка...
Important: Red Hat Security Advisory: Red Hat Mobile Application Platform security update
An update is now available for Red Hat Mobile Application Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
The Hutchison App has a logical design flaw
HeSeries is a comprehensive mobile service app developed by Chengdu HeSeries Network Technology Co. There is a logic design vulnerability in the HeSeries app. An attacker can log in to any account and reset any registered user's password by blasting the registration verification code and password...
Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability
Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...
Star Queen Aliyun OSS credentials have information leakage vulnerability
Star Queen APP is a social platform based on beauty and beautification manicure plastic surgery and bodybuilding and other industries. AliCloud Object Storage Service OSS is a massive, secure and highly reliable cloud storage service provided by AliCloud. After the star AliCloud OSS credentials...
Xinhua News Agency Ali Cloud OSS credentials have information leakage vulnerability
Xinhua News Agency Client is the mobile portal and new media flagship of the national news agency, the leader of China's new media national team, the unified entrance of China's party and government client clusters and the comprehensive information service platform. Aliyun Object Storage Service...
Palm Edge AliCloud OSS credentials have information leakage vulnerabilities
Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...
Information Leakage Vulnerability in True Cosmo's AliCloud OSS Credentials
ZhenYuMei APP is a plastic surgery application platform launched by Beijing Oriental Time Technology Co., Ltd, which is a consulting and communication platform integrating cosmetic surgery information, organizations, cases, projects, and surgery discounts. A vulnerability exists in the informatio...
Today's manipulation of the AliCloud OSS credentials have information leakage vulnerability
Today's manipulation is a practical financial management cell phone application, the user through the software can conveniently keep abreast of the precious metals trading market, information, easy financial management, efficient money. AliCloud Object Storage Service Object Storage Service,...
Active Wallet AliCloud OSS credentials have information leakage vulnerability
Activity Wallet is a mobile promotional app application from Chengdu Speedway Technology Co. Object Storage Service, abbreviated as OSS, is a massive, secure and highly reliable cloud storage service provided by AliCloud to the public. An information leakage vulnerability exists in the Activity...
