Heart Rate Monitor ANT+ BLE - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Heart Rate Monitor ANT+ BLE published at the 'play' market has multiple vulnerabilities...

New Relic: rpm.newrelic.com - monitor creation to other accounts

It is possible to create monitors for other users by changing the user id in the body of the post request when creating a new monitor. Even though my tests were unsuccessful in a XSS on the monitor information, it may be an attack vector to other vulnerabilities since the monitor information show...

Troubleshooting pointers for TCP monitor showing DOWN

How to troubleshoot an issue related to TCP monitor down reported for services configured on NetScaler...

PT-2016-5034

Name of the Vulnerable Software and Affected Versions Moodle versions 2.8.x through 2.8.10 Moodle versions 2.9.x through 2.9.4 Moodle versions 3.0.x through 3.0.2 Description The issue allows remote authenticated users to discover hidden course names by subscribing to a rule, due to the failure o...

oggchat1.icoa.com XSS vulnerability

Vulnerable URL: http://oggchat1.icoa.com/js/monitor.jsp?act=c094a3a22e0ba813012e0d85ca12011a=c094a3a22e0ba813012e0d85ca7b011b=%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E\spam404/%3CsVg/oNloAd=alert%28/XSSPOSED/%29//%3E\x3e=10=1 Details: Description| Value ---|--- Patched:| No Latest check...

Release Notes for Veeam ONE 9.0 Update 1

Challenge Release Notes for Veeam ONE 9.0 Update 1 Cause Please confirm you are running Veeam ONE 9 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client, the build number should be 9.0.0.xxx. After upgrading, your version build will be 9.0.0.2088. Thi...

Baby Monitor / Baby Alarm - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Baby Monitor / Baby Alarm published at the 'play' market has multiple vulnerabilities...

Moodle Event Monitor Design Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Event Monitor in version 2.8.x prior to Moodle...

AKIPS Network Monitor 16.5 OS Command Injection

Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection Date: 03-14-2016 Exploit Author: BrianWGray Contact: https://twitter.com/BrianWGray WebPage: http://somethingbroken.com/ Vendor Homepage: https://www.akips.com/ Software Link: https://www.akips.com/showdoc/download Version: 15.3...

AKIPS Network Monitor OS Command Injection

AKIPS Network Monitor is prone to an OS Command Injection SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:akips:networkmonitor";...

AKIPS Network Monitor Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection

AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection Date: 03-14-2016 Exploit Author: BrianWGray Contact: https://twitter.com/BrianWGray WebPage: http://somethingbroken.com/ Vendor Homepage: https://www.akips.com/...

AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection

Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection Date: 03-14-2016 Exploit Author: BrianWGray Contact: https://twitter.com/BrianWGray WebPage: http://somethingbroken.com/ Vendor Homepage: https://www.akips.com/ Software Link: https://www.akips.com/showdoc/download Version: 15.3...

AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection

Exploit for perl platform in category web applications Exploit Title: AKIPS Network Monitor 15.37-16.6 OS Command Injection Date: 03-14-2016 Exploit Author: BrianWGray Contact: https://twitter.com/BrianWGray WebPage: http://somethingbroken.com/ Vendor Homepage: https://www.akips.com/ Software Lin...

Microsoft Internet Explorer CVE-2016-0103 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack

Overview Network traffic encrypted using an RSA-based SSL certificate may be decrypted if enough SSLv2 handshake data can be collected. This is known as the "DROWN" attack in the media. Description According to the researcher, "DROWN" is a new form of cross-protocol Bleichenbacher padding oracle...

Installing x86 Veeam Monitor client

Challenge Installation of Veeam ONE Monitor Client x86 is required. Cause To access VM console, the x86 version of Veeam ONE Monitor Client must be installed. Solution 1. Open Veeam ONE 9 distribution .iso and locate veeammonitorclnx86.msi file in the Monitor folder. 2. Run CMD as administrator...

htop 2.0 - An Interactive Process Viewer for Unix

htop is an interactive system-monitor process-viewer. It is designed as an alternative to the Unix program top. It shows a frequently updated list of the processes running on a computer, normally ordered by the amount of CPU usage. Unlike top, htop provides a full list of processes running, inste...

Debian Security Advisory DSA 3471-1 (qemu - security update)

Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware. CVE-2015-7295 Jason Wang of Red Hat Inc. discovered that the Virtual Network Device support is vulnerable to denial-of-service, that could occur when receiving large packets. CVE-2015-7504 Qinghao Tan...

New Relic: Html injection in monitor name textbox

payload in monitor name textbox : image tag is executed in Monitot failed email fix : Need to done secure parse encode in monitor name textbox to prevent html injection in email...