Arbitrary File Download Vulnerability in Creative Portal Application System

Hebei Xinhe is an IT company that can provide customers with a full range of solutions and technical services. An arbitrary file download vulnerability exists in the Creative Portal application. An attacker is allowed to download arbitrary files...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04040)

Apache Struts is an open source framework for creating enterprise Java Web applications. A remote code execution vulnerability exists in Struts2, which can be exploited by an attacker to remotely execute arbitrary code by calling a malicious expression using a REST plugin...

Оплата частями - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Оплата частями published at the 'play' market has multiple vulnerabilities...

ПриватБюджет - Corrupted files, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application ПриватБюджет published at the 'play' market has multiple vulnerabilities...

XssPy - Web Application XSS Scanner

XssPy is a python tool for finding Cross Site Scripting vulnerabilities in websites. This tool is the first of its kind. Instead of just checking one page as most of the tools do, this tool traverses the website and find all the links and subdomains first. After that, it starts scanning each and...

phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting

phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting Exploit Title: phpMyFAQ 2.9.0 Stored XSS Date: 09-06-2016 Software Link: http://www.phpmyfaq.de/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description PHP...

منو داق - الكويت - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application منو داق - الكويت published at the 'play' market has multiple vulnerabilities...

Power Hit Radio Eesti - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Hit Radio Eesti published at the 'play' market has multiple vulnerabilities...

EPL digileht - veebipõhine - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EPL digileht - veebipõhine published at the 'play' market has multiple vulnerabilities...

Чайхона №1 — доставка еды - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Чайхона №1 — доставка еды published at the 'play' market has multiple vulnerabilities...

Learning colors for kids - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learning colors for kids published at the 'play' market has multiple vulnerabilities...

Мой проездной - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Мой проездной published at the 'play' market has multiple vulnerabilities...

CVE-2016-4317: XSS on viewmyprofile.action page

The viewmyprofile.action resource was vulnerable to persistent XSS...

AirWatch Tunnel - Base64 encoded String, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Tunnel published at the 'play' market has multiple vulnerabilities...

Яндекс.Парковки - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Яндекс.Парковки published at the 'play' market has multiple vulnerabilities...

Hitzewarnung - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hitzewarnung published at the 'play' market has multiple vulnerabilities...

Jenkins Android - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Jenkins Android published at the 'play' market has multiple vulnerabilities...

Important: Red Hat Security Advisory: ImageMagick security update

An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2016-3705

Missing incrementation of recursion depth counter were found in the xmlParserEntityCheck and xmlParseAttValueComplex functions used for parsing XML data. An attacker could launch a Denial of Service attack by passing specially crafted XML data to an application, forcing it to crash due to stack...

Trend Micro Direct Pass - Bypass & Cross Site Vulnerability

Document Title: =============== Trend Micro Direct Pass - Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1716 Trend Micro Security ID: 1-1-1039900197 Release Date: ============= 2016-05-01 Vulnerability Laboratory ID...