Поиск работы на HeadHunter. Вакансии рядом с домом - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Поиск работы на HeadHunter. Вакансии рядом с домом published at the 'play' market has multiple vulnerabilities...

Advantech SUSIAccess <= 3.0 - RecoveryMgmt File Upload Exploit

Exploit for jsp platform in category web applications ! /usr/bin/env ruby =begin Exploit Title: Advantech SUSIAccess RecoveryMgmt File Upload Date: 07/31/17 Exploit Author: james fitts Vendor Homepage: http://www.advantech.com/ Version: Advantech SUSIAccess = 3.0 Tested on: Windows 7 SP1 Relavant...

Упражнения для глаз PRO *FREE - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Упражнения для глаз PRO FREE published at the 'play' market has multiple vulnerabilities...

РБК Бизнес-Конференции - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application РБК Бизнес-Конференции published at the 'play' market has multiple vulnerabilities...

Arbitrary File Download Vulnerability in Principal Century NSAE Application Security Gateway

NSAE Application Security Gateway is a hardware device independently developed by Principal Century to provide security proxy services for application systems. An arbitrary file download vulnerability exists in NSAE Application Security Gateway. An attacker can use this vulnerability to obtain...

Arbitrary File Download Vulnerability in Gitzo Application Security Gateway

Shanghai Giteng Communication Equipment Co., Ltd. application security gateway adopts advanced MIPS multi-core architecture, equipped with self-developed security operating system, and realizes in-depth analysis of users, applications and contents through single-path parallel processing of...

Arbitrary Code Execution

dolibarr is vulnerable to arbitrary code execution attacks. Low-privilege users were able to upload .exe files to the application, these files would be executed in the context of the application...

Introducing InsightAppSec: Cloud-powered Application Security Testing

Rapid7 announces today the launch of InsightAppSec, the newest product to be delivered on the Insight platform. InsightAppSec combines the power and accuracy of Rapid7s industry-leading and proven Dynamic Application Security Testing DAST engine with the quick deployment, scalability, and...

Conversations on Securing Microservices, API Gateways and Containers

Last month, I met James name changed while at AWS Summit in London. As I was managing Imperva's booth, he walked over to me with a query about what we do. A conversation ensued and James described his company for me. They were into financial-legal intermediation between underwriters, insurance...

Junk Photo Cleaner & Remover - Upgrade Phone - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Junk Photo Cleaner & Remover - Upgrade Phone published at the 'play' market has multiple vulnerabilities...

CVE-2017-8004

The CVE concerns EMC RSA products (RSA Identity Governance and Lifecycle; RSA Via Lifecycle and Governance; RSA Identity Management and Governance) with affected versions: Identity Governance and Lifecycle 7.0.1/7.0.2 (all patch levels); Via Lifecycle and Governance 7.0 (all patch levels); RSA IM...

CVE-2017-7681

Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end...

CVE-2017-7672

If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12...

iPOS - לאומי קארד - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application iPOS - לאומי קארד published at the 'play' market has multiple vulnerabilities...

CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. The crash occurs in the EXTRACT16BITS function, called from the stpprint function for the Spanning Tree Protocol...

HealthifyMe Weight Loss Coach - Corrupted files, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application HealthifyMe Weight Loss Coach published at the 'play' market has multiple vulnerabilities...

Sberbank Online Kazakhstan - BSD license, Customized SSL, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Sberbank Online Kazakhstan published at the 'play' market has multiple vulnerabilities...

Sberbank Online Ukraine - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sberbank Online Ukraine published at the 'play' market has multiple vulnerabilities...

ryeharbour.net XSS vulnerability

Vulnerable URL: http://www.ryeharbour.net/myalbum.asp?less=1=1/-///'/"//--...

The vulnerabilities of Azure cloud services include those related to BIG-IP Application Security Manager, a device for securing applications; BIG-IP Access Policy Manager, a device for controlling access and remote authentication; BIG-IP Link Controller, a device for balancing internet traffic; BIG-IP Policy Enforcement Manager, a device for controlling and managing network traffic; BIG-IP Local Traffic Manager, a device for balancing local traffic; BIG-IP DNS, a device for securing web services; BIG-IP WebSafe, a device for securing web services; BIG-IP Advanced Firewall Manager, a device for providing network firewalls; and BIG-IP Application Acceleration Manager, a device for accelerating application processing. These vulnerabilities allow attackers to gain access to the BIG-IP host.

The vulnerability in Azure’s application security protection services—BIG-IP Application Security Manager, BIG-IP Access Policy Manager for access control and remote authentication, BIG-IP Link Controller for Internet traffic balancing, BIG-IP Policy Enforcement Manager for network traffic contro...