Humhub Cross-Site Scripting Vulnerability

Humhub is an open source PHP-based social networking system. A cross-site scripting vulnerability exists in Humhub versions 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta.1 through 1.0.0-beta.2. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

HumHub vulnerable to cross-site scripting

Overview HumHub is a software framework for developing a social networking service SNS. HumHub contains a cross-site scripting vulnerability. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Ear...

JVN#56167268: HumHub vulnerable to cross-site scripting

HumHub is a software framework for developing a social networking service SNS. HumHub contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provide...

Ubiquiti Inc.: Read-Only user can execute arbitraty shell commands on AirOS

This vulnerability is very similar to 128750, but it avoid the solution applied to the last beta XM firmware. In this report is used the last beta XM firmware: XM.v6.0-beta9 Vulnerability The vulnerability resides in the function fetchCookies file remote.inc:117. Just like last time is a non...

fengcms_v1.32.beta 前台SQL注入

No description provided by source...

DotCMS Cross-Site Scripting Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS 3.5 Beta. An attacker can exploit this vulnerability to...

DotCMS Directory Traversal Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A directory traversal vulnerability exists in the com.dotmarketing.servlets.taillog.TailLogServlet.class file i...

APITest.IO: beta version reveals paths, environment variables and partially files contents

Hi guys! You should disable error reporting on beta version. It reveals lot of information and even files contents. How to reproduce: 1 Navigate to http://beta.apitest.io/newsletter, modify csrf-token "token" to any data. 2 input something to "email" and "name" fields. 3 submit the form. As resul...

Zombie Raiders Beta - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Raiders Beta published at the 'play' market has multiple vulnerabilities...

Drunken Ed (Beta) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Drunken Ed Beta published at the 'play' market has multiple vulnerabilities...

MyFRITZ!App 2 Beta - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MyFRITZ!App 2 Beta published at the 'play' market has multiple vulnerabilities...

Caldav Sync Free Beta - Customized SSL, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Caldav Sync Free Beta published at the 'play' market has multiple vulnerabilities...

Chrome Beta - BSD license, Exported ContentProvider, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Chrome Beta published at the 'play' market has multiple vulnerabilities...

AMBOSS Bibliothek Beta-Version - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AMBOSS Bibliothek Beta-Version published at the 'play' market has multiple vulnerabilities...

AudioPocket BETA - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AudioPocket BETA published at the 'play' market has multiple vulnerabilities...

MoodDiary BETA - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MoodDiary BETA published at the 'play' market has multiple vulnerabilities...

OnlineIFA video chat BETA - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application OnlineIFA video chat BETA published at the 'play' market has multiple vulnerabilities...

Wikipedia Beta - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wikipedia Beta published at the 'play' market has multiple vulnerabilities...

Hacker Reveals How to Hack Any Facebook Account

Hacking Facebook account is one of the major queries of the Internet user today. It's hard to find — how to hack Facebook account, but an Indian hacker just did it. A security researcher discovered a 'simple vulnerability' in the social network that allowed him to easily hack into any Facebook...

New Relic: Unauthorized Access

Summary of Findings ------------------------------- The remote server https://download.newrelic.com allowed unauthenticated access to special access files that are only intended to be accessible after contacting the New Relic program managers as seen below. Exploiting the...