Open Source Intelligence and Forensics : Maltego

Maltego is an open source intelligence and forensics application Maltego is a visual link analysis tool that, out the box, comes with open source intelligence OSINT plugins, called transforms. The tool offers real-time data mining and information gathering as well as the representation of this...

Kids Picture Viewer - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Kids Picture Viewer published at the 'play' market has multiple vulnerabilities...

Picture Book For Toddlers Free - Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Picture Book For Toddlers Free published at the 'play' market has multiple vulnerabilities...

Magic Coloring Picture Book - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Magic Coloring Picture Book published at the 'play' market has multiple vulnerabilities...

Guess Picture - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess Picture published at the 'play' market has multiple vulnerabilities...

Picture Quiz: Logos - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Picture Quiz: Logos published at the 'play' market has multiple vulnerabilities...

Logic Pic - Picture Puzzle - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Logic Pic - Picture Puzzle published at the 'play' market has multiple vulnerabilities...

Luxury Picture Frames Editor - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Luxury Picture Frames Editor published at the 'play' market has multiple vulnerabilities...

Photo Lab Picture Editor FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Photo Lab Picture Editor FX published at the 'play' market has multiple vulnerabilities...

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

NVIDIA GPU was traced to vulnerabilities, you can view the porn browsing history-bug warning-the black bar safety net

! Chrome's incognito mode in some specific cases not necessarily be able to protect individual privacy, recently a gamer the exposure of the Nvidia GPU of the previous vulnerability, the use of the vulnerability can view Chrome incognito mode to browse porn sites picture. Evan Andersen once loade...

picturecollagesoftware.com XSS vulnerability

Open Bug Bounty ID: OBB-122028 Description| Value ---|--- Affected Website:| picturecollagesoftware.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Picture Window Pro Handles Multiple Memory Corruption Vulnerabilities in PCX Pictures

Picture Window Pro is an image processing software. Multiple memory corruption vulnerabilities exist when dealing with the PCX format, which can be exploited by attackers to construct malformed PCX images and crash the program. Successful exploitation could lead to arbitrary code execution...

UltraIso v 9.6.5 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Title : UltraIso v 9.6.5 - Buffer Overflow Vulnerability Author : ZwX Date : 24/10/2015 Vendor : https://www.ezbsystems.com/ Download : http://www.ezbsystems.com/ultraiso/download.htm Tested Os : Windows 7 steps to reproduce the...

Uber: Drivers can change profile picture

Riders are able to change their profile picture whenever they want and they should be allowed to either way. When a rider becomes a driver they should not be able to change their profile picture due to the fact they can change their pictures to something inappropriate. Replicate: Login into the...

sex.com XSS vulnerability

Vulnerable URL: http://www.sex.com/categories/?name=pictures'%22%26%25prompt/XSSPOSED/...

ownCloud: Full Path Disclosure

When I was trying to upload a html file as profile picture as a non admin user. then it popped up with a message containing full path . Like that "Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/12/files/opt/lampp/htdocs/owncloud/data/12/cache/avatarupload"." Thanks...

Firefox browser’s vulnerabilities that allow a hacker to execute arbitrary code

Multiple vulnerabilities in the libstagefright library of the Firefox browser are related to integer overflows. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code remotely, using a specially crafted MPEG-4 video file header...

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory Source: https://code.google.com/p/google-security-research/issues/detail?id=326&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for:...

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Source: https://code.google.com/p/google-security-research/issues/detail?id=326&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=475018 Credit is to bilou, working with the Chromium Vulnerability Rewards...