CVE-2016-3193

Fortinet CVE-2016-3193 is an XSS flaw in the FortiManager/FortiAnalyzer appliance web-application. Affected: FortiManager 5.x (before 5.0.12, before 5.2.6, before 5.4.1) and FortiAnalyzer 5.x (before 5.0.13, before 5.2.6, before 5.4.1). Root cause: unobstructed insertion of script/HTML by remote ...

Traveloka Book Flight & Hotel - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Traveloka Book Flight & Hotel published at the 'play' market has multiple vulnerabilities...

GitLab - 'impersonate' Feature Privilege Escalation

Exploit Title: GitLab privilege escalation via "impersonate" feature Date: 02-05-2016 Software Link: https://about.gitlab.com/ Version: 8.2.0 - 8.2.4, 8.3.0 - 8.3.8, 8.4.0 - 8.4.9, 8.5.0 - 8.5.11, 8.6.0 - 8.6.7, 8.7.0 Exploit Author: Kaimi Website: https://kaimi.ru CVE: CVE-2016-4340 Category:...

GitLab - 'impersonate' Feature Privilege Escalation

Exploit for ruby platform in category web applications Exploit Title: GitLab privilege escalation via "impersonate" feature Date: 02-05-2016 Software Link: https://about.gitlab.com/ Version: 8.2.0 - 8.2.4, 8.3.0 - 8.3.8, 8.4.0 - 8.4.9, 8.5.0 - 8.5.11, 8.6.0 - 8.6.7, 8.7.0 Exploit Author: Kaimi...

Microsoft Education - Stored Cross Site Web Vulnerability

Document Title: =============== Microsoft Education - Stored Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1897 Release Date: ============= 2016-08-10 Vulnerability Laboratory ID VL-ID: ====================================...

Мобильный банк УРАЛСИБ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Мобильный банк УРАЛСИБ published at the 'play' market has multiple vulnerabilities...

Ренессанс Кредит - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ренессанс Кредит published at the 'play' market has multiple vulnerabilities...

bahasa.cs.ui.ac.id XSS vulnerability

Vulnerable URL: http://bahasa.cs.ui.ac.id/kbbi/kbbi.php?keyword=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Red Hat JBoss Products RMI Java Deserialization Vulnerability (Nov 2015) - Active Check

Red Hat JBoss products are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP gettext 1.0.12 - 'gettext.php' Code Execution

CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...

CVE-2016-5386

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI...

CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...

Discontimo - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Discontimo published at the 'play' market has multiple vulnerabilities...

Castle Clash: Новая Эра - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Новая Эра published at the 'play' market has multiple vulnerabilities...

Едадил — акции в магазинах - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Едадил — акции в магазинах published at the 'play' market has multiple vulnerabilities...

Time2Work - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Time2Work published at the 'play' market has multiple vulnerabilities...

HiveTaxi - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HiveTaxi published at the 'play' market has multiple vulnerabilities...

The Void - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Void published at the 'play' market has multiple vulnerabilities...

Мой брокер - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Мой брокер published at the 'play' market has multiple vulnerabilities...

Arbitrary File Download Vulnerability in Creative Portal Application System

Hebei Xinhe is an IT company that can provide customers with a full range of solutions and technical services. An arbitrary file download vulnerability exists in the Creative Portal application. An attacker is allowed to download arbitrary files...