The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...

The vulnerability of Cisco PIX software allows a malicious individual to trigger a service failure.

Overloading the buffer in the Cisco PIX Firewall allows malicious actors operating remotely to trigger service failures by using authentication for HTTP traffic via TACACS+ or RADIUS...

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component in Microsoft Lync Attendee User allows for remote execution of code, provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install programs,...

WordPress WP Photo Album Plus Plugin <= 5.4.4 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

General Purpose Blocker: uBlock

General Purpose Blocker An efficient blocker for Chromium and Firefox. Fast and lean. uBlock Origin or uBlock₀ is not an ad blocker ; it’s a general-purpose blocker. uBlock₀ blocks ads through its support of the Adblock Plus filter syntax . uBlock₀ extends the syntax and is designed to work with...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Moxa Discontinuing Vulnerable Line of ICS Devices

A vulnerability that exists in embedded computers manufactured by Moxa could allow remote authenticated users to overwrite firmware, in turn rendering the devices unusable. Moxa, a Taiwan-based networking company, announced recently that instead of patching the line of products affected by the...

CVE-2016-4500

Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access...

CVE-2016-4500

The CVE-2016-4500 entry concerns Moxa UC-7408 LX-Plus devices where remote authenticated users can write to the firmware and render a device unusable by leveraging root access. Technical details indicate missing authentication for critical function (CWE-306) enabling a firmware overwrite that is ...

WordPress Q and A Focus Plus FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Q and A Focus Plus FAQ plugin is prone to full path disclosure and SQL injection vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities

Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and prior Exploit Author: Gwendal Le Coguic Website:...

WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities

WordPress Plugin Q and A Focus Plus FAQ 1.3.9.7 - Multiple Vulnerabilities Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/...

k-plus-s.com XSS vulnerability

Vulnerable URL: http://www.k-plus-s.com/de/search.html?query=%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Calculator Plus Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Calculator Plus Free published at the 'play' market has multiple vulnerabilities...

Plus Messenger - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Plus Messenger published at the 'play' market has multiple vulnerabilities...

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite allows a perpetrator to read arbitrary files.

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a maliciou...

Okey Plus - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Okey Plus published at the 'play' market has multiple vulnerabilities...

Apple iOS 9.3 S/Plus – touch password bypass vulnerability-vulnerability warning-the black bar safety net

! Description iOS is developed by Apple Phoneoperating system, published in 2 0 0 7 years use on the iPhone and iPod Touch, and has begun to extend to other Apple devices such as the iPad and Apple TV. With Microsoft's Windows Phone Windows CEand Google's Android systems, Apple does not authorize...

FBI claims its iPhone Hacking Tool can't Unlock iPhone 5S, 6S and 6S Plus

Although everyone, including Apple, was worried about the iPhone hacking tool used by the Federal Bureau of Investigation FBI to access data on iPhone belonged to the San Bernardino shooter, the FBI director said the hack does not work on an iPhone 5S or later. FBI Director James Comey said...

Apple iOS 9.3.1 Passcode Bypass

Document Title: =============== Apple iOS 9.3.1 iPhone 6S & iPhone Plus - 3D Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID:...