Atlassian Resets HipChat Passwords Following Breach

Atlassian reset user passwords for its group chat service HipChat on Monday following an incident that may have resulted in unauthorized access to a server used by the service. The company began warning users Monday via email that as a result an attacker may have secured access to user informatio...

Hotel Booking Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel & Tour Package Script v1.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/hotel-booking-script Demo:...

WordPress Chat-Room Plugin Has Multiple Vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Chat-Room is one of the chat room plug-ins. A directory traversal and arbitrary file write vulnerability exists i...

WordPress Chat-Room plugin v0.1.2 directory traversal/arbitrary file write Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Chat-Room plugin v0.1.2 directory traversal/arbitrary file write Date: 2017-03-08 Exploit Author: malwrforensics Vendor Homepage: https://webdevstudios.com/ Software Link: https://wordpress.org/plugins/chat-room/...

Joomla Room Management 1.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Dem...

Joomla! Component Room Management 1.0 - SQL Injection

Joomla! Component Room Management 1.0 - SQL Injection Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Dem...

Joomla! Component Room Management 1.0 - SQL Injection

Exploit Title: Joomla! Component Room Management v1.0 - SQL Injection Google Dork: inurl:index.php?option=comroommgmt Date: 18.02.2017 Vendor Homepage: http://matamko.com/ Software Buy: http://matamko.com/products/room-management/live-demo Demo: http://matamko.com/products/room-management/live-de...

Phabricator: User with only Viewing Privilege can send message to Room

Hey, mongoose When the owner of a chat room gives any user Viewing Privilege, that user can then send messages to the room. As expected, there's no form to send messages when the user access the room since in theory it shouldn't be possible. However, messages via POST requests can still be sent a...

Slack: Eavesdropping on private Slack calls

A vulnerability exists in Slack's call functionality that allows a team member to eavesdrop on private ongoing Slack calls by inviting themselves into the conversation without the permission from either participant. By doing so they can eavesdrop on co-workers' private conversations as well as...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware,...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...

Cross-site scripting vulnerability in Wordpress plugin book-a-room

book-a-room is a Wordpress plugin primarily used for library specific meeting room bookings and public events calendar system management and staff events. The book-a-room plugin is vulnerable to an xss vulnerability due to improper filtering of user input, which could allow an attacker to constru...

Badi - room rentals - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Badi - room rentals published at the 'play' market has multiple vulnerabilities...

Escape Girl's Room - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Escape Girl's Room published at the 'play' market has multiple vulnerabilities...

Room Escape 3 - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Room Escape 3 published at the 'play' market has multiple vulnerabilities...

Escape the Prison Room - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Escape the Prison Room published at the 'play' market has multiple vulnerabilities...

Spotlight: Room Escape - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spotlight: Room Escape published at the 'play' market has multiple vulnerabilities...

BFF Salon - Tea Room Party - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BFF Salon - Tea Room Party published at the 'play' market has multiple vulnerabilities...

Murder Room - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Murder Room published at the 'play' market has multiple vulnerabilities...

Room Temperature - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Room Temperature published at the 'play' market has multiple vulnerabilities...