61 matches found
Foxit Reader XFA absPageSpan Remote Code Execution Vulnerability
Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the XFA absPageSpan method, which can be exploited by an attacker to execute arbitrary code in the current process context due to a lack of proper validation of user-supplied data...
Free Abs Workout Exercises - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Free Abs Workout Exercises published at the 'play' market has multiple vulnerabilities...
Waist Slimming Abs Workout - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Waist Slimming Abs Workout published at the 'play' market has multiple vulnerabilities...
Abs – Push-Ups - Arms - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Abs – Push-Ups - Arms published at the 'play' market has multiple vulnerabilities...
Fitway: Daily Abs Workout free - Customized SSL, Dangerous filesystem permissions, GPL license vulnerabilities
HackApp vulnerability scanner discovered that application Fitway: Daily Abs Workout free published at the 'play' market has multiple vulnerabilities...
Abs workout II - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Abs workout II published at the 'play' market has multiple vulnerabilities...
Abs Sit Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Abs Sit Ups Workout published at the 'play' market has multiple vulnerabilities...
Six Pack Abs Workout LumoWell - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Six Pack Abs Workout LumoWell published at the 'play' market has multiple vulnerabilities...
8 Minutes Abs Workout - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 8 Minutes Abs Workout published at the 'play' market has multiple vulnerabilities...
Abs workout 7 minutes - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Abs workout 7 minutes published at the 'play' market has multiple vulnerabilities...
✔Best Abs Fitness: Ab Workouts - Dangerous filesystem permissions, Insecure KeyStore, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application ✔Best Abs Fitness: Ab Workouts published at the 'play' market has multiple vulnerabilities...
Abs workout - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Abs workout published at the 'play' market has multiple vulnerabilities...
CVE-2014-5794
The CVE-2014-5794 entry affects the Android app 8 Minutes Abs Workout (net.p4p.absen) version 2.0.9. The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via a c...
CVE-2010-5292
Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...
CVE-2010-5291
Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
CVE-2010-5292
Amberdms Billing System (ABS) prior to version 1.4.1, in multi-instance setups, allows local users to read cached data during the cron-triggered services_usage.php run, exposing sensitive information. Affected component is the cache between cron executions; root cause described as reading cache b...
CVE-2010-5291
Affected software: Amberdms Billing System (ABS). Vulnerability: improper handling of login invalidation after detection, i.e., blacklisting is not properly implemented. Root cause: failure to blacklist after failed login attempts. Impact: enables remote attackers to gain access via brute-force a...
CVE-2010-5291
Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the path parameter to library/adodb/adodb.inc.php, 2 the abspatheditor parameter to library/editor/editor.php, or 3 the cfgfiletoload parameter to...