Service worker meeting notes

On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...

Clinic Management System - Blind SQL Injection

Vulnerability Title : Clinic Management System Unauthenticated Blind SQL Injection apointment.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/clinic-management-system Version : All Versions Tested on : Apache | PHP 5.5.36 | MySQL...

FantasyTote: Weak HSTS age

Send this request: https://www.fantasytote.com/login GET /login HTTP/1.1 Host: www.fantasytote.com User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:47.0 Gecko/20100101 Firefox/47.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5...

Caching best practices & max-age gotchas

Getting caching right yields huge performance benefits, saves bandwidth, and reduces server costs, but many sites half-arse their caching, creating race conditions resulting in interdependent resources getting out of sync. The vast majority of best-practice caching falls into one of two patterns:...

Game of War - Fire Age - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Game of War - Fire Age published at the 'play' market has multiple vulnerabilities...

Archaeologist - Ice Age - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Archaeologist - Ice Age published at the 'play' market has multiple vulnerabilities...

Age of Conquest LITE - Customized SSL, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Age of Conquest LITE published at the 'play' market has multiple vulnerabilities...

Naval Age - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Naval Age published at the 'play' market has multiple vulnerabilities...

Mammoth World -Ice Age animals - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mammoth World -Ice Age animals published at the 'play' market has multiple vulnerabilities...

Age of Avatars-艾瓦達榮耀 - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Age of Avatars-艾瓦達榮耀 published at the 'play' market has multiple vulnerabilities...

Brain Age Test Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brain Age Test Free published at the 'play' market has multiple vulnerabilities...

Ice Age Village - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ice Age Village published at the 'play' market has multiple vulnerabilities...

The Silent Age - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Silent Age published at the 'play' market has multiple vulnerabilities...

Ice Age Adventures - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ice Age Adventures published at the 'play' market has multiple vulnerabilities...

Heroes of Dragon Age - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Heroes of Dragon Age published at the 'play' market has multiple vulnerabilities...

Hearing Age Test - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearing Age Test published at the 'play' market has multiple vulnerabilities...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

Coalfire Contributes to New Book on Cybersecurity

Today marks the launch of a new book published by the New York Stock Exchange and Palo Alto Networks called, "Navigating the Digital Age: The Definitive Cybersecurity Guide for Directors and Officers." Im proud to have worked with my predecessor, the late Rick Dakin, to contribute a chapter to th...

cpe.vtc.edu.hk XSS vulnerability

Vulnerable URL: http://cpe.vtc.edu.hk/en/programmes/programme-search/1093dealingwithbusinessandpeoplesuccessfullyintheinternetagefinancialserviceprofessionalsmodule2howtomakeyourbusinessmoresuccessfulintheinternetagesfinancialserviceindustry732f2? Details: Description| Value ---|--- Patched:| Yes...

Google Now Manually Reviews Play Store Android App Submissions

Google has changed the way it managed apps on the Google Play Store. After years of depending on the automated app check process, the company just made some changes to its Play Store policies that will successfully weed out malicious and undesirable apps from Google Play store. Google has...