SQLite Tempdir Selection Vulnerability

Vulnerability Details Affected Vendor: SQLite/Hwaci Affected Product: SQLite Affected Version: All versions prior to 3.13.0 Platform: UNIX, GNU/Linux CWE Classification: CWE-379: Creation of Temporary File in Directory with Incorrect Permissions Impact: Data Leakage Attack vector: Local 2...

[SECURITY] Fedora 24 Update: roundcubemail-1.2.0-1.fc24

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

План счетов Украина - External URLs, SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application План счетов Украина published at the 'play' market has multiple vulnerabilities...

F5 Networks BIG-IP : SQLite vulnerability (K16950)

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

SOL37236006 - SQLite vulnerabilities CVE-2015-3414 and CVE-2015-3415

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

[SECURITY] Fedora 23 Update: roundcubemail-1.2.0-1.fc23

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 24 Update: roundcubemail-1.1.5-1.fc24

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

SQL Injection

Overview Affected versions of sequelize use MySQL's backslash-based escape syntax when connecting to SQLite, despite the fact that SQLite uses PostgreSQL's escape syntax, which can result in a SQL Injection vulnerability. Recommendation Update to version 1.7.0-alpha3 or later. References - Commit...

[SECURITY] Fedora 22 Update: roundcubemail-1.1.5-1.fc22

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 23 Update: roundcubemail-1.1.5-1.fc23

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

phpLiteAdmin 1.9.6 - Multiple Vulnerabilities

phpLiteAdmin 1.9.6 - Multiple Vulnerabilities Exploit Title: phpLiteAdmin v1.9.6 - Multiple Vulnerabilities Date: 20.04.2016 Exploit Author: Ozer Goker Vendor Homepage: https://www.phpliteadmin.org Software Link: https://bitbucket.org/phpliteadmin/public/downloads/phpLiteAdminv1-9-6.zip Version:...

phpLiteAdmin 1.9.6 - Multiple Vulnerabilities

Exploit Title: phpLiteAdmin v1.9.6 - Multiple Vulnerabilities Date: 20.04.2016 Exploit Author: Ozer Goker Vendor Homepage: https://www.phpliteadmin.org Software Link: https://bitbucket.org/phpliteadmin/public/downloads/phpLiteAdminv1-9-6.zip Version: 1.9.6 Introduction phpLiteAdmin is a web-based...

SQL Injection

Overview Affected versions of sequelize cast arrays to strings and fail to properly escape the resulting SQL statement, resulting in a SQL injection vulnerability. Proof of Concept In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as strings and improperly...

Georgian Quotes - ანდაზები - Dynamic Code Loading, External URLs, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application Georgian Quotes - ანდაზები published at the 'play' market has multiple vulnerabilities...

The Gospels in Unison - SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application The Gospels in Unison published at the 'play' market has multiple vulnerabilities...

为何我信 - Base64 encoded String, SD-card access, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application 为何我信 published at the 'play' market has multiple vulnerabilities...

The Reason Why - Base64 encoded String, SD-card access, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application The Reason Why published at the 'play' market has multiple vulnerabilities...

ガールズ＆パンツァー 戦車道大作戦！ - Dynamic Code Loading, External URLs, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application ガールズ＆パンツァー 戦車道大作戦！ published at the 'play' market has multiple vulnerabilities...

Doraemon MusicPad - External URLs, Native code usage, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application Doraemon MusicPad published at the 'play' market has multiple vulnerabilities...

Learn Chinese - HelloChinese - Exported components, SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese - HelloChinese published at the 'play' market has multiple vulnerabilities...