Santa Runner :Xmas Subway Surf - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Santa Runner :Xmas Subway Surf published at the 'play' market has multiple vulnerabilities...

Mr-Bean Surf - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr-Bean Surf published at the 'play' market has multiple vulnerabilities...

MSW Surf Forecast - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MSW Surf Forecast published at the 'play' market has multiple vulnerabilities...

devise-two-factor 1.1.0 and earlier vulnerable to replay attacks

A OTP replay vulnerability in devise-two-factor 1.1.0 and earlier allows local attackers to shoulder-surf a user's TOTP verification code and use it to login after the user has authenticated. By not "burning" a previously used TOTP, devise-two-factor allows a narrow window of opportunity aka the...

Snapchat's CAPTCHA Hacked in 30 Minutes, 100 Line of Code

It was only going to be a matter of time before someone figured out a way past Snapchat’s new CAPTCHA verification method. Just one day after the photo sharing application announced its latest security measure, one researcher claimed Wednesday that he was able to hack it with as few as 100 lines ...

Unfixed XSS vulnerability at www.surf-kite.fr

Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.surf-kite.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

FreeBSD : surf -- private information disclosure (039d057e-544e-11e1-9fb7-003067b2972c)

surf does not protect its cookie jar against access read access from other local users %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors...

FreeBSD Ports: surf

The remote host is missing an update to the system as announced in the referenced advisory. VID 039d057e-544e-11e1-9fb7-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID 039d057e-544e-11e1-9fb7-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: surf

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

surf -- private information disclosure

surf does not protect its cookie jar against access read access from other local users...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to 1 index.php, 2 faq.php, and 3 register.php...

CVE-2009-4460

CVE-2009-4460 describes cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the rid parameter to index.php, faq.php, and register.php. The provided documents do not specify affected versi...

Debian Security Advisory DSA 1623-1 (dnsmasq)

The remote host is missing an update to dnsmasq announced via advisory DSA 1623-1. OpenVAS Vulnerability Test $Id: deb16231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1623-1 dnsmasq Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Yet another wretched trick: Surf Jacking-vulnerability warning-the black bar safety net

Author: thorn This technique is today EnableSecurityissue. The prerequisite is to be able tointercepted trafficit. Specifically, it can monitor the uplink traffic, you can modify the downstream flow. Method by the arp spoofing, DNS spoofing, wireless monitor or the like. Some people might say, ca...

Debian DSA-1623-1 : dnsmasq - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. This update changes Debian's dnsmasq packages to implement the recommended...

[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning

------------------------------------------------------------------------ Debian Security Advisory DSA-1623-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...

DSA-1623-1 dnsmasq - cache poisoning

Bulletin has no description...

Surf fixes a few security vulnerabilities-vulnerability warning-the black bar safety net

In 80sec notification to travel into the presence of the security vulnerability after that, surf to 6. 3 0 released a new version of the browser, fixes the previously mentioned security vulnerability, the specific update can be found http://blog. maxthon. cn/, the update fixes three security...

Unfixed XSS vulnerability at ws1.surf-town.net

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting ws1.surf-town.net, which at the time of submission ranked 214758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

CVE-2001-0972

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie UserID 1, i.e. "0888888."...