Nelio AB Testing <= 4.5.8 - Server Side Request Forgery (SSRF)

The Nelio AB Testing WordPress plugin was affected by a Server Side Request Forgery SSRF security vulnerability...

WordPress Nelio AB Testing Plugin <= 4.5.8 - Server Side Request Forgery

This plugin is prone to a server side request forgery vulnerability. It allows attacker to collect various information about the server or even achieve remote code execution. Solution Update the plugin...

Kabona AB WDC Open Redirect Vulnerability

Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. An open redirection vulnerability exists in Kabona AB WDC versions prior to 3.4.0. An attacker can exploit this vulnerability to redirect users to a malicious page...

Kabona AB WDC Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-17-287-07 Kabona AB WDC Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. Martin Jartelius and John Stock of Outpost 24 have identified vulnerabilities in Kabona AB’s...

Boozt Fashion AB: ADB Backup is enabled within AndroidManifest

ADB Backup is enabled for this app. ADB Backup feature is a good tool for backing up all of your files. If it's enabled, malicious users who have your phone can copy all of the sensitive data for this app in your phone. Requirement: Unlock phone's screen; Enable the developer mode. Sensitive data...

Boozt Fashion AB: Http header injection

Researcher reported a Host injection vulnerability which caused redirect to happen to unwanted hostname...

Boozt Fashion AB: Potential Subdomain Takeover Possible

Issue Description The researcher identified that the affected url points to sendgrid.net, via a DNS CNAME record. As a result of this an attacker could potentially initate a subdomain take over by registering the subdomain sendgrid.boozt.com on sendgrid and consiquently leverage this for further...

Boozt Fashion AB: Android app does not use SSL for login

We tested the Android app, v2.0.2 To replicate: Install the app, and run it until you reach the login screen. Install PacketCapture: https://play.google.com/store/apps/details?id=app.greyshirts.sslcapture Go to PacketCapture, go through setup, SKIP the SSL certificate install process Activate...

Boozt Fashion AB: PHP info page disclosure on http://www.day.dk/

Hi, Boozt team. Description: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step to reproduce: 1. Go to http://www.day.dk/check.php An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...

Kabona AB WDC Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-17-287-07 Kabona AB WDC Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. Martin Jartelius and John Stock of Outpost 24 have identified vulnerabilities in Kabona AB’s...

WordPress Nelio AB Testing Plugin <= 4.4.4 - Path Traversal

This vulnerability allows attackers to read the contents of files and expose sensitive data. If the targeted file is used for a security mechanism, then the attacker is able to bypass that mechanism. Solution Update the plugin...

Nelio AB Testing <= 4.4.4 - Path Traversal

The Nelio AB Testing WordPress plugin was affected by a Path Traversal security vulnerability...

California Kills Phone Decryption Bill

Civil liberty groups and tech firms are celebrating the defeat of a controversial California bill that would have forced phone makers to decrypt their devices by court order. The proposed legislation, AB 1681, died when lawmakers refused to give the bill a vote. But opponents of the bill, who...

AB Math lite - games for kids - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application AB Math lite - games for kids published at the 'play' market has multiple vulnerabilities...

Ab in den Urlaub - Flüge - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ab in den Urlaub - Flüge published at the 'play' market has multiple vulnerabilities...

Ich nehm' ab - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Ich nehm' ab published at the 'play' market has multiple vulnerabilities...

Daily Ab Workout Free - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Daily Ab Workout Free published at the 'play' market has multiple vulnerabilities...

Ladies' Ab Workout FREE - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ladies' Ab Workout FREE published at the 'play' market has multiple vulnerabilities...

Daily Ab Workout FREE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Daily Ab Workout FREE published at the 'play' market has multiple vulnerabilities...

✔Best Abs Fitness: Ab Workouts - Dangerous filesystem permissions, Insecure KeyStore, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application ✔Best Abs Fitness: Ab Workouts published at the 'play' market has multiple vulnerabilities...