Lucene search
+L

1703 matches found

hackapp
hackapp
•added 2016/04/01 9:54 a.m.•11 views

My little unicorn runner 3D - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My little unicorn runner 3D published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•12 views

Forest Road Runner - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Forest Road Runner published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•10 views

Shadow Runner - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Runner published at the 'play' market has multiple vulnerabilities...

1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•12 views

Train Runner - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Train Runner published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•20 views

Santa Runner :Xmas Subway Surf - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Santa Runner :Xmas Subway Surf published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:45 a.m.•24 views

Line Runner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Line Runner published at the 'play' market has multiple vulnerabilities...

0.7AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:45 a.m.•10 views

Temple Princess Runner 2016 - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Temple Princess Runner 2016 published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:03 a.m.•12 views

5K Runner: 0 to 5K in 8 Weeks - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 5K Runner: 0 to 5K in 8 Weeks published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
zdt
zdt
•added 2015/09/11 12:00 a.m.•61 views

OS X Install.framework suid root Runner Binary Privilege Escalation Vulnerability

Exploit for macOS platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=478 The Install.framework runner suid root binary does not correctly account for the fact that Distributed Objects can be connected to by multiple clients at the same...

9.3CVSS8.9AI score0.07421EPSS
SaveExploits2
CNVD
CNVD
•added 2015/08/19 12:00 a.m.•12 views

Apple OS X 'Install.framework' 'runner' elevation of privilege vulnerability (CNVD-2015-05546)

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in 'Install.framework' 'runner' in the Apple OS X privilege manager allows remote users to exploit the vulnerability to execute arbitrary code with root privileges...

9.3CVSS7.8AI score0.09027EPSS
SaveExploits2References1
Prion
Prion
•added 2015/08/17 12:01 a.m.•21 views

Design/Logic Flaw

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

9.3CVSS7.2AI score0.09027EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/16 12:00 a.m.•5 views

CVE-2015-5754: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error...

9.3CVSS6.5AI score0.07421EPSS
SaveExploits2References2
CNVD
CNVD
•added 2015/07/02 12:00 a.m.•14 views

Apple MAC OS X Install.framework runner privilege dropping vulnerability

Apple Mac OS X is a commercial operating system. The Apple Mac OS X Install.framework 'runner' setuid program fails to properly discard privileges, allowing attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...

9.3CVSS7.2AI score0.09301EPSS
SaveExploits2References1
NVD
NVD
•added 2014/09/09 1:55 a.m.•22 views

CVE-2014-5608

The Line Runner Free aka com.djinnworks.linerunnerfree application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
•added 2014/09/09 1:00 a.m.•44 views

CVE-2014-5608

The CVE-2014-5608 entry applies to the Android app Line Runner (Free) (com.djinnworks.linerunnerfree) version 4. The vulnerability is due to the app not verifying X.509 certificates when connecting to SSL servers, enabling a man-in-the-middle to spoof servers and access sensitive data via a craft...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/09 1:00 a.m.•33 views

CVE-2014-5608

The Line Runner Free aka com.djinnworks.linerunnerfree application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/09 12:00 a.m.•3 views

CVE-2014-5608: Undefined Security Weakness

The Line Runner Free aka com.djinnworks.linerunnerfree application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/16 12:00 a.m.•2 views

CVE-2013-4259: Undefined Security Weakness

runner/connectionplugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/...

1.9CVSS5.7AI score0.00342EPSS
SaveExploits0References2
zdt
zdt
•added 2012/10/20 12:00 a.m.•27 views

Zip Code Locator - CSRF/SQLi Vulnerabilities

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•15 views

CentOS Update for xulrunner CESA-2011:0373 centos5 x86_64

Check for the Version of xulrunner OpenVAS Vulnerability Test CentOS Update for xulrunner CESA-2011:0373 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

7.4AI score
SaveExploits0References2
Rows per page
Query Builder