iSpy Keylogger Targets Passwords, Skype, Webcams

Researchers are monitoring sales and infection rates of a new keylogger being sold on the dark web for $25 to $35. Along with capturing keystrokes, iSpy grabs passwords stored in web browsers, records Skype chats, takes webcam screenshots and steals the license keys of software such as Adobe...

2wire Gateway Authentication Bypass

Gateway Authentication Bypass Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Oracle Glassfish Server Directory Traversal

Directory traversal vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Vanderbilt IP-Camera File Disclosure

File disclosure vulnerability in Vanderbilt IP-Camera Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Zimbra iCollaboration Server LFI

Local file include vulnerability in Zimbra iCollaboration Server Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

VideoIQ Camera File Disclosure

File disclosure vulnerability in VideoIQ Camera Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

SugarCRM 6.5.18 RCE

Remote command execution vulnerability in SugarCRM Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

avalonsales.com XSS vulnerability

Vulnerable URL: http://avalonsales.com/sales/results.php?town=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Apache Continuum 1.4.2 RCE

Remote code execution vulnerability in Apache Continuum Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

IPS Community Suite RCE

Remote Code Execution in IPS Community Suite Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Drupal WikiWiki SQL Injection

SQL Injection vulnerability in Drupal WikiWiki module find parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_bt_media SQL Injection

SQL Injection vulnerability in Joomla Component combtmedia categories parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Stampado Ransomware Sells on Dark Web for $39

Dirt cheap ransomware selling for as little as $39 on the dark web has security experts concerned the low price coupled with its potency could trigger a wave of new infections. The ransomware is called Stampado and besides its hallmark low price, the ransomware is also unique because it threatens...

Tiki Wiki CMS 15.1 Upload

Arbitrary upload vulnerability in Tiki Wiki CMS elfinder Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

londonautosales.com XSS vulnerability

Vulnerable URL: http://www.londonautosales.com/index.php?fn=catalog.detail=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E29526 Details: Description| Value ---|--- Patched:| Yes, at 19.06.2017 Latest check for patch:| 19.06.2017 07:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Google to Face a Record $3.4 Billion AntiTrust Fine in Europe

Google faces a record anti-trust penalty of about 3 BILLION Euros US$3.4 Billion from the European Commission in the coming days, according to reports. After 7-years of the investigation, the European Commission filed anti-trust charges against Google last year for violating antitrust laws. The...

Open-Letters 1.0.5 RCE

Remote command execution vulnerability in Open-Letters 1.0.5 ajaxcreatefolder.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Season Sales - Shopping Salon - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Season Sales - Shopping Salon published at the 'play' market has multiple vulnerabilities...

Sales Rep Route Planner - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sales Rep Route Planner published at the 'play' market has multiple vulnerabilities...

MYBESTBRANDS Fashion & Sales - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MYBESTBRANDS Fashion & Sales published at the 'play' market has multiple vulnerabilities...