Berliner Zeitung - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Berliner Zeitung published at the 'play' market has multiple vulnerabilities...

Berlin APP - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Berlin APP published at the 'play' market has multiple vulnerabilities...

Jobs in Germany - Berlin - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Jobs in Germany - Berlin published at the 'play' market has multiple vulnerabilities...

PivotX 2.3.11 Directory Traversal

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PivotX 2.3.11 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://pivotx.net/ Vulnerability Type: Directory Traversal Remote Exploitable: Yes Reported to vendor: 01/20/2016 Disclosed to public: 03/15/2016...

PivotX 2.3.11 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: PivotX 2.3.11 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://pivotx.net/ Vulnerability Type: Reflected XSS Remote Exploitable: Yes Reported to vendor: 01/20/2016 Disclosed to public: 03/15/2016 Release...

PivotX 2.3.11 - Directory Traversal

PivotX 2.3.11 - Directory Traversal Security Advisory - Curesec Research Team 1. Introduction Affected Product: PivotX 2.3.11 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://pivotx.net/ Vulnerability Type: Directory Traversal Remote Exploitable: Yes Reported to vendor: 01/20/20...

berlin-street-view.de XSS vulnerability

Open Bug Bounty ID: OBB-127722 Description| Value ---|--- Affected Website:| berlin-street-view.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID20385: Email Messages Distributing Malicious Software on January 11, 2016

Medium Alert ID: 42973 First Published: 2016 January 11 14:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20385 may contain the following files: Name |...

Grawlix 1.0.3 - Cross-Site Request Forgery

Grawlix 1.0.3 - Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/17/20...

redaxscript 2.5.0 Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: redaxscript 2.5.0 Fixed in: module has been removed in version 2.6.0 Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015...

Threat Outbreak Alert RuleID19858: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42500 First Published: 2015 December 7 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19858 may contain the following files: Name |...

bogofilter -- heap corruption by invalid base64 input

David Relson reports: Fix a heap corruption in base64 decoder on invalid input. Analysis and patch by Julius Plenz, FU Berlin, Germany...

Innominate MGuard Weak HTTPS and SSH Keys

Overview An independent research group comprised of Nadia Heninger, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman identified an insufficient entropy vulnerability in Innominate’s mGuard network appliance product line. By impersonating the device, an attacker can obtain the credentials of...

Verkehrsbetriebe Berlin SQL Injection

Title: ====== Verkehrsbetriebe Berlin - SQL Injection Vulnerability Date: ===== 2012-01-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=138 VL-ID: ===== 138 Introduction: ============= VBB Verkehrsverbund Berlin-Brandenburg GmbH Der VBB koordiniert die Interessen der...

Simple-HTTPD

Remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose ToDo: Add execute shell ToDo: Test vulnerable targets Modified by JSacco - [email protected] part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell...

S Bahn VB Berlin - Remote SQL Injection Vulnerability

Document Title: =============== S Bahn VB Berlin - Remote SQL Injection Vulnerability Release Date: ============= 2011-08-15 Vulnerability Laboratory ID VL-ID: ==================================== 168 Product & Service Introduction: =============================== S-Bahn Berlin GmbH -...

Simple HTTPd 1.42 - PUT Remote Buffer Overflow

Simple HTTPd 1.42 - PUT Remote Buffer Overflow !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Date: 2011-08-02 Author: nion Software: http://code.google.com/p/mongoose/...

Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Author: nion Software: http://code.google.com/p/mongoose/...

S Bahn VB Berlin - Remote SQL Injection Vulnerability

Document Title: =============== S Bahn VB Berlin - Remote SQL Injection Vulnerability Release Date: ============= 2011-08-15 Vulnerability Laboratory ID VL-ID: ==================================== 168 Product & Service Introduction: =============================== S-Bahn Berlin GmbH -...

Unfixed XSS vulnerability at berlin.adagio4.eu

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting berlin.adagio4.eu, which at the time of submission ranked 5058573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is current...