Making simple Nmap SPA web GUI with Apache, AngularJS and Python Twisted

The last time I was developing dynamic web applications years ago. I used CGI and PHP back then. Now I am really interested in a modern approach, when you have a Single Page Web Application SPA written in HTML and JavaScript, that makes http requests to some external API. It's pretty cool, becaus...

online.spa.gov.my XSS vulnerability

Open Bug Bounty ID: OBB-457747 Description| Value ---|--- Affected Website:| online.spa.gov.my Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2017-12271

A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking...

CVE-2017-12260

A vulnerability in the implementation of Session Initiation Protocol SIP functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service DoS...

Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones Denial of Service Vulnerability

The Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones are IP telephony products from Cisco USA. A denial of service vulnerability exists in the implementation of the Session Initiation Protocol SIP feature in the Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones, whi...

CVE-2017-12219

A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to the...

Threat Outbreak Alert RuleID30699: Email Messages Distributing Malicious Software on September 19, 2017

Medium Alert ID: 55337 First Published: 2017 September 19 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30699 may contain the following files: Name ...

CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

Design/Logic Flaw

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

Cisco Small Business SPA300 Series/SPA500 Series and SPA51x IP Phones Denial of Service Vulnerability

Cisco Small Business SPA300 and so on are the S series of IP phone products of the American Cisco Cisco company. A denial of service vulnerability exists in Cisco Small Business SPA300 Series/SPA500 Series and SPA51x IP Phones. An attacker could exploit this vulnerability to cause a denial of...

Cisco Small Business SPA Series VoIP Device Detection (SIP)

SIP based detection of Cisco Small Business SPA Series VoIP devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-2403: Unauthorized access on a misconfigured Ldap server when using an empty password

Affected versions Symfony 2.8.0 to 2.8.5 and 3.0.0 to 3.0.5 versions of the Symfony Security component are affected by this security issue. The issue has been fixed in Symfony 2.8.6 and 3.0.6. Description The bind operation of LDAP, as described in RFC 4513, provides a method which allows for...

Lips Spa Salon - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lips Spa Salon published at the 'play' market has multiple vulnerabilities...

Mermaid Princess Spa & Salon - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mermaid Princess Spa & Salon published at the 'play' market has multiple vulnerabilities...

Date Night Salon: Beauty SPA - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Date Night Salon: Beauty SPA published at the 'play' market has multiple vulnerabilities...

High School Girl Salon Lip SPA - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application High School Girl Salon Lip SPA published at the 'play' market has multiple vulnerabilities...

Wedding Day SPA! Bride & Groom - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wedding Day SPA! Bride & Groom published at the 'play' market has multiple vulnerabilities...

Make Me A Star: Celebrity Spa - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Make Me A Star: Celebrity Spa published at the 'play' market has multiple vulnerabilities...

Face Paint Beauty SPA Salon 2 - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Face Paint Beauty SPA Salon 2 published at the 'play' market has multiple vulnerabilities...

Ice Queen's Beauty SPA Salon - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ice Queen's Beauty SPA Salon published at the 'play' market has multiple vulnerabilities...