U by BB&T iOS banking application fails to properly validate SSL certificates

Overview U by BB&T for iOS, version 1.5.4 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks. Description CWE-295: Improper Certificate Validation - CVE-2016-6550U by BB&T is a banking...

BB RADIO - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application BB RADIO published at the 'play' market has multiple vulnerabilities...

BB-8™ App Enabled Droid - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application BB-8™ App Enabled Droid published at the 'play' market has multiple vulnerabilities...

HackerOne: Private program activity timeline information disclosure

HI, There are some company which are hosting as external https://hackerone.com/directory?query=type%3Aexternal&sort=name%3Aascending&page=1 but some one was hosting private BB on HackerOne which are not visible unless they invite you. However, you can check if any company is hosting private BB on...

Python-rsa signature forgery-vulnerability warning-the black bar safety net

! By looking at the python-rsa source code, we found that it is the presence of a vulnerability is based on Bleichenbacher'0 6 attack research out for the RSA signature forgery of a simple variant, is due to the public key index is too low. The vulnerability can lead to arbitrary information to...

HackerOne: Know whether private program for company exist or not

HI, There are some company which are hosting private BB on HackerOne which are not visible unless they invite you. However, you can check if any company is hosting private BB on HackerOne or not if you can guess the username they use. Generally most company chooses the same name as their company...

Blueberry Express 5.9.0.3678 - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Document Title: =============== Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability Product & Service Introduction: =============================== Create engaging movies by adding text, sound and images to your screen recording. Ma...

Power BB 1.8.3 - Remote File Includes

No description provided by source. Dada?lar Grup Komutanl??? | HackSpy | Zombie | KroNickq | DigitALL | NoFearx38 | 1923Turk Grup by DigitALL Sites : http://powerwd.net Download : http://www.phpexplorer.com/Goster/536 Download : http://sourceforge.net/projects/pbb/ Power BB 1.8.3 Remote File...

Joomla Component JooBB 0.5.9 - Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print Joomla Component Joo!BB Blind SQL Injection Exploit \n; print Author:His0k4 ALGERIAN HaCkeR \n; print \n; print Conctact: His0k4.hlmatgamil.com \n; print Greetz: All friends...

Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...

Joomla! and Mambo Joo!BB 0.5.9 Component - 'forum' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29475/info The Joo!BB component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability

No description provided by source. Quezza BB = 1.0 quezzarootpath File Inclusion Vulnerability. Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0752)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0752 advisory. 1.7.0.19-2.3.9.1.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to Enterprise Linux 1.7.0.19-2.3.9.1.el5 - updated to updated IcedTea 2.3.9 wi...

Blizard BB 1.7 SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

IBM Rational Rhapsody BBFlashBack.Recorder.dll Multiple Code Execution (CVE-2011-1388)

Multiple code execution vulnerabilities have been reported in the BB FlashBack FBRecorder ActiveX control, a component of IBM Rational Rhapsody. The vulnerabilities are due to improper input validation within several methods. A remote attacker could exploit these vulnerabilities by enticing the...

IBM Rational Rhapsody BBFlashBack.Recorder.1 TestCompatibilityRecordMode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within BB FlashBa...

IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Rhapsody. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaws exists within BB...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution VUlnerabilities

This host is installed with IBM Rational Rhapsody and is prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmrationalrhapsodyactivexcodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ IBM Rational Rhapsody BB FlashBack SDK ActiveX Control Remote Code Execution...

IBM Rational Rhapsody BB FlashBack SDK ActiveX Control RCE Vulnerabilities

IBM Rational Rhapsody is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1388

The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via...