Legal Robot: Email spoofing possible via Legal Robot domain

Dear Team, There are few email spoofing tools available on for free and one of them is http://emkei.cz/ When i tried to send an email from [email protected] to my mail, it was successful and straight away delivered into my inbox but when i tried to send it from another mail id...

Legal Robot: User Information leak allows user to bypass email verification.

When a user is logged on, the following is sent: ██████ This contains some sensitive information, most notably the email token. A user can use this to bypass email verification and verify any email. In addition, the hashed password is leaked, which could present a vulnerability if a user's accoun...

Legal Robot: User Information sent to client through websockets

Hey, I noticed when monitoring the websocket requests that the account information of many users, including email address, is sent to the client. For example: ██████ ██████████ █████████ ████████ ███████ There's hundreds of these requests, each containing user information. Please let me know if...

Hacker reports Vulnerability in Mr. Robot Season 2 Website

Mr. Robot was the biggest 'Hacking Drama' television show of 2015 and its second season will return to American TV screens on Wednesday 13th of July 2016. However, the new promotional website for season two of Mr. Robot has recently patched a security flaw that could have easily allowed a hacker ...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-431)

This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...

スーパーロボット大戦X-Ω - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application スーパーロボット大戦X-Ω published at the 'play' market has multiple vulnerabilities...

Figuromo Kids : Robot - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Figuromo Kids : Robot published at the 'play' market has multiple vulnerabilities...

Robot match - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Robot match published at the 'play' market has multiple vulnerabilities...

Robot Defense - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Robot Defense published at the 'play' market has multiple vulnerabilities...

Iron Robot Rush -Transformers - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Iron Robot Rush -Transformers published at the 'play' market has multiple vulnerabilities...

Iron Kill: Real Robot Boxing - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Iron Kill: Real Robot Boxing published at the 'play' market has multiple vulnerabilities...

Ultimate Robot Fighting - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Robot Fighting published at the 'play' market has multiple vulnerabilities...

Real Steel World Robot Boxing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Steel World Robot Boxing published at the 'play' market has multiple vulnerabilities...

iOS song of ice and fire fan outside the post - App Hook the Q & A and iOS 9 bash shell-vulnerability warning-the black bar safety net

In the previous Chapter we talked about in a non-jailbreak iOS on the App Hook. Using this technique, you can be in a non-jailbreak iOS on the system to achieve a variety of hook features, e.g., micro-channel auto-grab a red envelope, the automatic chat robot, game plug-in, etc. But because of...

Legal Robot: Remote Code Execution (upload)

Any file upload was accepted without filter, which led to RCE vulnerability. It was difficult to find the path tho :P Strange thing : The shell was executing on firefox only :P , it displayed plain text when opened in chrome...

Legal Robot: Rate limiting on password reset links

Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like password reset links...

SET v6.5 - The Social-Engineer Toolkit “Mr Robot”

The Social-Engineer Toolkit SET was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. SET has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two...

Legal Robot: No valid SPF record

After multiple DNS changes, security researcher discovered that SPF records were not carried over properly between migrations...

Legal Robot: CSRF

Security researcher identified a logout CSRF attack, which was later patched...

Sql injection

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php...