Figuromo Kids : Robot - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Figuromo Kids : Robot published at the 'play' market has multiple vulnerabilities...

Robot match - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Robot match published at the 'play' market has multiple vulnerabilities...

Robot Defense - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Robot Defense published at the 'play' market has multiple vulnerabilities...

Iron Robot Rush -Transformers - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Iron Robot Rush -Transformers published at the 'play' market has multiple vulnerabilities...

Iron Kill: Real Robot Boxing - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Iron Kill: Real Robot Boxing published at the 'play' market has multiple vulnerabilities...

Ultimate Robot Fighting - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate Robot Fighting published at the 'play' market has multiple vulnerabilities...

Real Steel World Robot Boxing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Steel World Robot Boxing published at the 'play' market has multiple vulnerabilities...

iOS song of ice and fire fan outside the post - App Hook the Q & A and iOS 9 bash shell-vulnerability warning-the black bar safety net

In the previous Chapter we talked about in a non-jailbreak iOS on the App Hook. Using this technique, you can be in a non-jailbreak iOS on the system to achieve a variety of hook features, e.g., micro-channel auto-grab a red envelope, the automatic chat robot, game plug-in, etc. But because of...

Legal Robot: Remote Code Execution (upload)

Any file upload was accepted without filter, which led to RCE vulnerability. It was difficult to find the path tho :P Strange thing : The shell was executing on firefox only :P , it displayed plain text when opened in chrome...

Legal Robot: Rate limiting on password reset links

Security researcher discovered a potential issue where no rate limiting was applied to sensitive functions, like password reset links...

SET v6.5 - The Social-Engineer Toolkit “Mr Robot”

The Social-Engineer Toolkit SET was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. SET has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two...

Legal Robot: No valid SPF record

After multiple DNS changes, security researcher discovered that SPF records were not carried over properly between migrations...

Legal Robot: CSRF

Security researcher identified a logout CSRF attack, which was later patched...

Sql injection

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php...

PT-2014-8951

Name of the Vulnerable Software and Affected Versions RobotStats version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the robot parameter in the admin/robots.php endpoint, specifically targeting the formulaireRobot function in...

CVE-2014-9348: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the formulaireRobot function in admin/robots.lib.php in RobotStats 1.0 allows remote attackers to execute arbitrary SQL commands via the robot parameter to admin/robots.php...

GLSA-201406-32 : IcedTea JDK: Multiple vulnerabilities (BEAST) (ROBOT)

The remote host is affected by the vulnerability described in GLSA-201406-32 IcedTea JDK: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the IcedTea JDK. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute...

Snapchat's new Security feature Hacked in 30 Minutes; CAPTCHA Cracking tool published

Snapchat suffered a massive data breach back in December in which 4.6 million usernames and phone numbers were compromised. Earlier this month, the company launched an update to its iOS and Android apps, added a new security measure to ensure that new users aren't spambots or a robot. While signi...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 8362) (ROBOT)

IBM Java 1.5.0 has been updated to SR15 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVE-2012-3216 / CVE-2012-3143 / CVE-2012-5073 / CVE-2012-5075 / CVE-2012-5083 / CVE-2012-5083 / CVE-2012-1531 / CVE-2012-5081 /...

Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (20121018) (ROBOT)

As a reminder, the openjdk Java environment is available in Scientific Linux 5. Updates for openjdk are released in a similar manner to other security updates. Scientific Linux 6 does not bundle the closed source Java environment. All running instances of Sun/Oracle Java must be restarted for the...