423 matches found
Boozt Fashion AB: Potential Subdomain Takeover Possible
Issue Description The researcher identified that the affected url points to sendgrid.net, via a DNS CNAME record. As a result of this an attacker could potentially initate a subdomain take over by registering the subdomain sendgrid.boozt.com on sendgrid and consiquently leverage this for further...
Boozt Fashion AB: Android app does not use SSL for login
We tested the Android app, v2.0.2 To replicate: Install the app, and run it until you reach the login screen. Install PacketCapture: https://play.google.com/store/apps/details?id=app.greyshirts.sslcapture Go to PacketCapture, go through setup, SKIP the SSL certificate install process Activate...
Boozt Fashion AB: PHP info page disclosure on http://www.day.dk/
Hi, Boozt team. Description: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step to reproduce: 1. Go to http://www.day.dk/check.php An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...
Kabona AB WDC Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-17-287-07 Kabona AB WDC Vulnerabilities that was published October 13, 2016, on the NCCIC/ICS-CERT web site. Martin Jartelius and John Stock of Outpost 24 have identified vulnerabilities in Kabona AB’s...
Nelio AB Testing <= 4.4.4 - Path Traversal
The Nelio AB Testing WordPress plugin was affected by a Path Traversal security vulnerability...
WordPress Nelio AB Testing Plugin <= 4.4.4 - Path Traversal
This vulnerability allows attackers to read the contents of files and expose sensitive data. If the targeted file is used for a security mechanism, then the attacker is able to bypass that mechanism. Solution Update the plugin...
California Kills Phone Decryption Bill
Civil liberty groups and tech firms are celebrating the defeat of a controversial California bill that would have forced phone makers to decrypt their devices by court order. The proposed legislation, AB 1681, died when lawmakers refused to give the bill a vote. But opponents of the bill, who...
AB Math lite - games for kids - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application AB Math lite - games for kids published at the 'play' market has multiple vulnerabilities...
Ab in den Urlaub - Flüge - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ab in den Urlaub - Flüge published at the 'play' market has multiple vulnerabilities...
Ich nehm' ab - BSD license, Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Ich nehm' ab published at the 'play' market has multiple vulnerabilities...
Daily Ab Workout Free - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Daily Ab Workout Free published at the 'play' market has multiple vulnerabilities...
Ladies' Ab Workout FREE - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Ladies' Ab Workout FREE published at the 'play' market has multiple vulnerabilities...
Daily Ab Workout FREE - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Daily Ab Workout FREE published at the 'play' market has multiple vulnerabilities...
✔Best Abs Fitness: Ab Workouts - Dangerous filesystem permissions, Insecure KeyStore, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application ✔Best Abs Fitness: Ab Workouts published at the 'play' market has multiple vulnerabilities...
30 Day Ab Challenge FREE - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 30 Day Ab Challenge FREE published at the 'play' market has multiple vulnerabilities...
Ab Ins Kino - Kinoprogramm - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ab Ins Kino - Kinoprogramm published at the 'play' market has multiple vulnerabilities...
httpd security, bug fix, and enhancement update
2.2.15-45.0.1 - replace index.html with Oracle's index page oracleindex.html - update vstring in specfile 2.2.15-45 - modproxybalancer: add support for 'drain mode' N 767130 2.2.15-44 - set SSLCipherSuite to DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES 1086771 2.2.15-43 - revert DirectoryMatch patc...
httpd, mod_ssl security update
CentOS Errata and Security Advisory CESA-2015:1249 Updated httpd packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scori...
Low: Red Hat Security Advisory: httpd security, bug fix, and enhancement update
Updated httpd packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
