1417 matches found
Forest Road Runner - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Forest Road Runner published at the 'play' market has multiple vulnerabilities...
Shadow Runner - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Shadow Runner published at the 'play' market has multiple vulnerabilities...
Train Runner - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Train Runner published at the 'play' market has multiple vulnerabilities...
Santa Runner :Xmas Subway Surf - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Santa Runner :Xmas Subway Surf published at the 'play' market has multiple vulnerabilities...
Line Runner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Line Runner published at the 'play' market has multiple vulnerabilities...
Temple Princess Runner 2016 - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Temple Princess Runner 2016 published at the 'play' market has multiple vulnerabilities...
5K Runner: 0 to 5K in 8 Weeks - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application 5K Runner: 0 to 5K in 8 Weeks published at the 'play' market has multiple vulnerabilities...
OS X Install.framework suid root Runner Binary Privilege Escalation Vulnerability
Exploit for macOS platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=478 The Install.framework runner suid root binary does not correctly account for the fact that Distributed Objects can be connected to by multiple clients at the same...
Apple OS X 'Install.framework' 'runner' elevation of privilege vulnerability (CNVD-2015-05546)
Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in 'Install.framework' 'runner' in the Apple OS X privilege manager allows remote users to exploit the vulnerability to execute arbitrary code with root privileges...
Design/Logic Flaw
runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
Apple MAC OS X Install.framework runner privilege dropping vulnerability
Apple Mac OS X is a commercial operating system. The Apple Mac OS X Install.framework 'runner' setuid program fails to properly discard privileges, allowing attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...
CVE-2014-5608
The Line Runner Free aka com.djinnworks.linerunnerfree application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5608
The Line Runner Free aka com.djinnworks.linerunnerfree application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5608
The CVE-2014-5608 entry applies to the Android app Line Runner (Free) (com.djinnworks.linerunnerfree) version 4. The vulnerability is due to the app not verifying X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle to spoof servers and access sensitive data via a craft...
Zip Code Locator - CSRF/SQLi Vulnerabilities
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
CentOS Update for xulrunner CESA-2011:0373 centos5 x86_64
Check for the Version of xulrunner OpenVAS Vulnerability Test CentOS Update for xulrunner CESA-2011:0373 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Web Sudo should be able to be subverted for non browsers (eg scripts) via a HTTP header
We do this for XSRF protection. Basically you should be able to subvert the web sudo mechanism via a HTTP header. This posts shows the use case https://answers.atlassian.com/questions/1273/jira-jelly-runner-via-cron-in-v4-3-4 I believe it just as secure since web sudo is really design to stop som...
Web Sudo should be able to be subverted for non browsers (eg scripts) via a HTTP header
We do this for XSRF protection. Basically you should be able to subvert the web sudo mechanism via a HTTP header. This posts shows the use case https://answers.atlassian.com/questions/1273/jira-jelly-runner-via-cron-in-v4-3-4 I believe it just as secure since web sudo is really design to stop som...
USN-1019-1: Firefox and Xulrunner vulnerabilities
Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov discovered several memory issues in the browser engine. An attacker could exploit these to crash the browser or possibly run arbitrary code as the user invoking the program. CVE-2010-3776, CVE-2010-3777, CVE-2010-3778 It was...
