Paint Splash! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Paint Splash! published at the 'play' market has multiple vulnerabilities...

Fruit Splash - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fruit Splash published at the 'play' market has multiple vulnerabilities...

Jelly Splash - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Jelly Splash published at the 'play' market has multiple vulnerabilities...

Photo Color Splash Effect - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Color Splash Effect published at the 'play' market has multiple vulnerabilities...

Color Splash Photo - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Color Splash Photo published at the 'play' market has multiple vulnerabilities...

Color Splash Effect - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Color Splash Effect published at the 'play' market has multiple vulnerabilities...

Color Splash Effect Photo Edit - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Color Splash Effect Photo Edit published at the 'play' market has multiple vulnerabilities...

leonidas.com XSS vulnerability

Open Bug Bounty ID: OBB-61899 Description| Value ---|--- Affected Website:| leonidas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Oct 2014) - Windows

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5749

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5749

The CVE-2014-5749 entry concerns the Jelly Splash (com.wooga.jelly_splash) Android app running version 1.11.3. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafte...

CVE-2014-5749

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

[BTCrack v1.1] The worlds first Bluetooth Pass phrase (PIN) Bruteforce Tool

BTCrack is the worlds first Bluetooth Pass phrase PIN bruteforce tool, BTCrack will bruteforce the Passkey and the Link key from captured pairing exchanges. BTcrack was demoed and realeased at Hack.lu 2007 and 23C3 in Berlin, the video of the presentation is available on Google Video . To capture...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)

This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...

Oracle Linux 5 : squirrelmail (ELSA-2009-0057)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-0057 advisory. 1.4.8-5.0.1.el52.3 - Remove Redhat splash screen images 1.4.8-5.3 - Update patch for CVE-2008-3663 to fix a session handling regression 480224 Tenable...

SA-CONTRIB-2013-057 - TinyBox - Cross Site Scripting (XSS)

TinyBox module uses TinyBox, a lightweight and standalone modal window script. The main purpose of this module is to provide Splash Screen/Window as simple as possible. The module doesn't filter user-supplied text prior to display. The vulnerability is mitigated by the fact that an attacker must...

Splash Pro HD Player Denial Of Service

Exploit for windows platform in category dos / poc Application : Splash Pro Hd Player .avi Denial of Service Date : 02/03/2012 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates Greet : i greet to Gjoko 'LiquidWorm' Krstic and my friends in anywhere and also every...

Splash PRO 1.12.1 - '.avi' File Denial of Service

source: https://www.securityfocus.com/bid/52273/info Splash PRO is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Splash PRO 1.12.1 is vulnerable; other versions may also be affected. PoC =...

Splash PRO 1.12.1 - .avi File Denial of Service

Splash PRO 1.12.1 - .avi File Denial of Service source: https://www.securityfocus.com/bid/52273/info Splash PRO is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Splash PRO 1.12.1 is vulnerable;...