IBM iNotes and Domino Cross-Site Scripting Vulnerability (CNVD-2016-11819)

IBM iNotes and Domino are both products of IBM Corporation in the U.S. iNotes is a suite of Web-based e-mail software; Domino is a platform for hosting social business applications. A cross-site scripting vulnerability exists in IBM iNotes and Domino that stems from the program failing to properl...

CVE-2016-2869

Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...

hdwiki pms.php SQL Injection Vulnerability

Interactive Wiki open source system HDwiki is a free interactive online Beijing Technology Co. A SQL injection vulnerability exists in hdwiki pms.php, which allows attackers to exploit the vulnerability to obtain sensitive information from the website database...

Ali poly security Android application vulnerability scanner analysis: local denial of service detection detailed explanation-vulnerability warning-the black bar safety net

Ali poly security of the Android application vulnerability scanners have a detection item is a local denial of service vulnerability detection using static analysis applied motion blur test of the method to the detection, the detection results are accurate and comprehensive. This article will tal...

CVE-2016-3936

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568...

Кредиты и микро-займы онлайн - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Кредиты и микро-займы онлайн published at the 'play' market has multiple vulnerabilities...

SQL Injection Vulnerability in Fuzhou Tranda Special Equipment Safety Monitoring System

Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...

vlcms \Application\Media\Controller\DownController.class.php arbitrary File Download

No description provided by source...

Gratipay: The contribution save option seem to be vulnerable to CSRF

The application is vulnerable to Cross Site Request Forgery ==================== Description --------------------- The option in the application to save weekly contribution for a project is vulnerable to Cross Site Request forgery. Note: I am unable to perform the action itself normally. But it i...

CVE-2016-2493

The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 2013, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522...

CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

iScripts EasyCreate Remote Code Execution Vulnerability

iScripts EasyCreate is an online website builder that can be used on a server to provide website building services to clients and is fully customizable. A remote code execution vulnerability exists in iScripts EasyCreate. The 'userImages' POST parameter of the '/ajaximageupload.php' script fails ...

アイドルマスター シンデレラガールズ - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application アイドルマスター シンデレラガールズ published at the 'play' market has multiple vulnerabilities...

Little Things® Forever - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Little Things® Forever published at the 'play' market has multiple vulnerabilities...

Swipe Train–For Kids&Toddler - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Swipe Train–For Kids&Toddler published at the 'play' market has multiple vulnerabilities...

Puppet Tennis-Forehand topspin - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Tennis-Forehand topspin published at the 'play' market has multiple vulnerabilities...

Arrow Crossword - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Arrow Crossword published at the 'play' market has multiple vulnerabilities...

Picture Quiz: Logos Answer - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Picture Quiz: Logos Answer published at the 'play' market has multiple vulnerabilities...

Zgadnij co to? - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zgadnij co to? published at the 'play' market has multiple vulnerabilities...

Cato and Macro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cato and Macro published at the 'play' market has multiple vulnerabilities...