Lucene search
+L

2010 matches found

hackapp
hackapp
added 2016/04/01 8:42 a.m.10 views

なぞってあそぼ!なぞりっこ - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application なぞってあそぼ!なぞりっこ published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:41 a.m.14 views

絵本が読み放題「森のえほん館」無料お試しつき - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 絵本が読み放題「森のえほん館」無料お試しつき published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:41 a.m.7 views

リズムあそび 赤ちゃん・子供向けのアプリ 人気知育ゲーム無料 - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application リズムあそび 赤ちゃん・子供向けのアプリ 人気知育ゲーム無料 published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:40 a.m.16 views

テイルズ オブ アスタリア - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application テイルズ オブ アスタリア published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/03/30 8:29 a.m.11 views

לאומי - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application לאומי published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/03/30 7:21 a.m.20 views

Chess - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chess published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/03/17 1:51 p.m.33 views

iSmartAlarm - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application iSmartAlarm published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/03/15 7:39 a.m.7 views

Binäre Optionen Coach - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Binäre Optionen Coach published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2016/03/12 12:0 a.m.20 views

Kaltura Community Edition 11.1.0-2 Code Execution / File Upload / File Read

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Kaltura Community Edition Multiple Vulnerabilities Affected versions: Kaltura Community Edition =11.1.0-2 PDF:...

SaveExploits0
hackapp
hackapp
added 2016/02/27 3:27 p.m.11 views

050 plus - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 050 plus published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/02/11 12:50 p.m.11 views

Yellow Minion Face Maker - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Yellow Minion Face Maker published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2016/02/06 12:0 a.m.36 views

WordPress Newsletter Pro 2.5.3.3 Open Redirect

^^^^^^^^^^^ ^ Exploit Title : Wordpress Newsletter Pro Plugin Open Redirect ^ Exploit Author : Ashiyane Digital Security Team ^ Vendor Homepage: http://www.thenewsletterplugin.com/downloads ^ Google Dork : inurl:newsletter-pro/do.php ^ Date : 06 Feb. 2016 ^ Tested On : Win 10 | CyberFox Browser &...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/02/01 12:0 a.m.24 views

Debian DLA-408-1 : gosa security update

GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes it has been possible to inject malicious Perl code. This upload to...

9.8CVSS8.3AI score0.02395EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2016/01/23 8:24 p.m.97 views

p0wnedShell - PowerShell Runspace Post Exploitation Toolkit

p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershell runspace environment .NET. It has a lot of offensive PowerShell modules and binaries included to make the process of Post...

7.4AI score
SaveExploits0References3
NVD
NVD
added 2016/01/08 7:59 p.m.16 views

CVE-2015-8597

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

7.4CVSS7.4AI score0.0192EPSS
SaveExploits1References3
Prion
Prion
added 2016/01/08 7:59 p.m.19 views

Open redirect

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

5.8CVSS7.2AI score0.0192EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2016/01/08 7:0 p.m.21 views

CVE-2015-8597

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

7.3AI score0.0192EPSS
SaveExploits1References3
htbridge
htbridge
added 2016/01/07 12:0 a.m.523 views

SSO Authentication Bypass and Website Takeover in DOKEOS

High-Tech Bridge Security Research Lab discovered a high-risk vulnerability in a popular e-learning software DOKEOS. A remote unauthenticated attacker can bypass authentication process and login to the vulnerable website with an arbitrary account including administrator's one. Successful...

7.7AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2015/10/12 12:0 a.m.60 views

WordPress Pie Register 2.0.18 Cross Site Scripting

Details ================ Software: Pie Register Version: 2.0.18 Homepage: https://github.com/GTSolutions/Pie-Register CVE: CVE-2015-7377 Pending CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N CWE: CWE-79 Description ================ An unauthenticated reflected XSS vulnerability in Pie Register...

4.3CVSS6.5AI score0.04405EPSS
SaveExploits3
NVD
NVD
added 2015/09/01 2:59 p.m.13 views

CVE-2015-6737

Cross-site scripting XSS vulnerability in the Widgets extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via vectors involving base64 encoded content...

4.3CVSS5.5AI score0.02009EPSS
SaveExploits0References6
Rows per page
Query Builder