CVE-2017-16019

GitBook is a command line tool and Node.js library for building beautiful books using GitHub/Git and Markdown or AsciiDoc. Stored Cross-Site-Scripting XSS is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader...

books.openedition.org XSS vulnerability

Open Bug Bounty ID: OBB-609680 Description| Value ---|--- Affected Website:| books.openedition.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple iOS iBooks Component Denial of Service Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices. iBooks component is one of the eBook components. A security vulnerability exists in the iBooks component in Apple iOS versions prior to 11. The vulnerability can be exploited by a remote attacker to cause a denial of...

Fedora 25 : php-horde-turba (2017-449b22158f)

turba 4.2.20 - jan SECURITY: Fix open redirects. - jan Fix creating address books with the external API. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

euroimpalabooks.com XSS vulnerability

Vulnerable URL: http://www.euroimpalabooks.com/store/search?term='"/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5595696 VIP website status:| No Check euroimpalabooks.com SSL...

Tapas – Books, Comics, Stories - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Tapas – Books, Comics, Stories published at the 'play' market has multiple vulnerabilities...

Many of My E-Books for Cheap

Humble Bundle is selling a bunch of cybersecurity books very cheaply. You can get copies of Applied Cryptography, Secrets and Lies, and Cryptography Engineering -- and also Ross Anderson's Security Engineering, Adam Shostack's Threat Modeling, and many others. This is the cheapest you'll ever see...

The Social-Engineer Toolkit (SET)

The Social-Engineer Toolkit SET is specifically designed to perform advanced attacks against the human element. SET has quickly became a standard tool in a penetration testers arsenal. SET is written by David Kennedy ReL1K and with a lot of help from the community it has incorporated attacks neve...

Five Ways That Good Guys Share More Than Bad Guys

It takes a lot for me to write a cybersecurity blog post these days. I spend most of my writing time working on my PhD. Articles like Nothing Brings Banks Together Like A Good Hack drive me up the wall, however, and a Tweet rant is insufficient. What fired me up, you might ask? Please read the...

Canon IR-ADV Password Extractor

An authentication bypass vulnerability exists in Canon IR-ADV. A remote attacker can exploit this vulnerability by extracting the passwords from address books on various Canon IR-Adv mfp devices...

maclace.com.au XSS vulnerability

Vulnerable URL: http://www.maclace.com.au/product-cat.php?cat=Books Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2795494 VIP website status:| No Check maclace.com.au SSL...

MOVING BOOKS! Jajajajan Arabic - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MOVING BOOKS! Jajajajan Arabic published at the 'play' market has multiple vulnerabilities...

MOVING BOOKS! Jajajajan - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MOVING BOOKS! Jajajajan published at the 'play' market has multiple vulnerabilities...

Fairy Tales ~ 3D Pop-up Books! - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fairy Tales 3D Pop-up Books! published at the 'play' market has multiple vulnerabilities...

Google Play Books - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Google Play Books published at the 'play' market has multiple vulnerabilities...

MortPlayer Audio Books - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application MortPlayer Audio Books published at the 'play' market has multiple vulnerabilities...

Kobo Books - Reading App - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kobo Books - Reading App published at the 'play' market has multiple vulnerabilities...

White Tiger Books - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application White Tiger Books published at the 'play' market has multiple vulnerabilities...

English Audio Books - Librivox - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application English Audio Books - Librivox published at the 'play' market has multiple vulnerabilities...

Free Books - 23,469 Classics - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free Books - 23,469 Classics published at the 'play' market has multiple vulnerabilities...