Debian DLA-509-1 : samba security update

The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should set 'client signing = required' instead. For Debian 7 'Wheezy', these...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

DLA-509-1 samba - security update

Bulletin has no description...

Joomla Joomdoc 4.0.3 Path Disclosure

Exploit Title : Joomla comjoomdoc - Full Path Disclosure Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/joomdoc Category: Webapps Tested on: Win Version: 4.0.3 Date: 2016/06/08 PoC: Full Path Disclosure FPD vulnerabilities enable the...

Joomla AvailCal 05 SQL Injection

Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...

Joomla Jumi 3.0.5 Cross Site Scripting

Exploit Title : Joomla Component comjumi - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/jumi Category: Webapps Tested on: Win Date: 2016/05/26 Version : 3.0.5 PoC: fileid vulnerable to XSS Payload = "PersianHack Team Demo :...

Dswjcms Win/Index/loanAjax.html,Loan/loanAjax.html 两处SQL注入

No description provided by source...

Tuninfoforyou 2 / 2.5 Backdoor Account

Exploit Title : Tuninfoforyou - Weak Password Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.tuninfoforyou.com/ Category: Webapps Tested on: Win Version: 2 And 2.5 Date: 2016/05/20 PoC: Login Page : /reservation/admin/ And /b2b/admin/ User and Password = admin Demo ...

Joomla Event Manager 2.x Cross Site Scripting

Exploit Title : Joomla Event Manager comjem - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.joomlaeventmanager.net/download Category: Webapps Tested on: Win Version: 2.x Date: 2016/05/11 PoC: itemid=XSS Payload = "PersianHack Team Demo :...

i-Tech Nepal Radio CMS 2.0 SQL Injection

Exploit Title : i-Tech Nepal Radio CMS SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.itechnepal.com Google Dork : "Powered By : i-Tech Nepal" inurl:php? Date: 2016/04/26 Category: Webapps Tested on: Win /php Version : 2.0 Vulnerable Inputs: + alid + i...

Zarafe.net CMS 1.0 SQL Injection

Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...

Big Win NHL Hockey - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Big Win NHL Hockey published at the 'play' market has multiple vulnerabilities...

Big Win Football 2015 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Big Win Football 2015 published at the 'play' market has multiple vulnerabilities...

BIG WIN Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BIG WIN Racing published at the 'play' market has multiple vulnerabilities...

BIG WIN Hockey - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BIG WIN Hockey published at the 'play' market has multiple vulnerabilities...

Spin To Win Slots - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Spin To Win Slots published at the 'play' market has multiple vulnerabilities...

Lucky Win Casino™- FREE SLOTS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Lucky Win Casino™- FREE SLOTS published at the 'play' market has multiple vulnerabilities...

Big Win Slots™ - Slot Machines - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Big Win Slots™ - Slot Machines published at the 'play' market has multiple vulnerabilities...

Win 10 Launcher - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Win 10 Launcher published at the 'play' market has multiple vulnerabilities...

FBI Files Motion to Vacate Case Against Apple

Update The FBI has dropped its case filed a motion to vacate today’s scheduled court hearing and showdown over its demands that Apple help unlock a terrorist’s iPhone. The government late Monday afternoon filed a motion to vacate its case, likely putting a halt to a saga that began in mid-Februar...