CVE-2015-6027

Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...

CVE-2015-6028

Castle Rock Computing SNMPc is affected by CVE-2015-6028 due to a SQL injection in the sc parameter prior to 2015-12-17. The CNVD record CNVD-2017-05437 confirms the vulnerability in Castle Rock SNMPc Network Manager, noting the ability for a remote attacker to extract data from the database via ...

CVE-2015-6027

Castle Rock Computing SNMPc is vulnerable to Cross-Site Scripting via SNMP in versions prior to 2015-12-17. Affected component is SNMPc; root cause is a XSS vulnerability exploitable through SNMP. Public impact details are limited to what is stated in the sources (XSS; potential for modification ...

CVE-2015-6028

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6028: Improper Neutralization of Special Elements used in an SQL Command

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6027: Improper Neutralization of Input During Web Page Generation

Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP...

PT-2017-6919

Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for cross-site scripting XSS attacks via SNMP. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the...

PT-2017-6920

Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for SQL injection via the sc parameter. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the issue...

FreeBSD : Several Security Defects in the Bouncy Castle Crypto APIs (89cf8cd2-0698-11e7-aa3f-001b216d295b)

The Legion of the Bouncy Castle reports : Release: 1.56 2.1.4 Security Related Changes and CVE's Addressed by this Release: multiple %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrig...

Castle Clash: Rise of Beasts - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Rise of Beasts published at the 'play' market has multiple vulnerabilities...

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in the Enterprise Manager Base Platform component : - A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve. An...

stormy-castle-1476.herokuapp.com XSS vulnerability

Open Bug Bounty ID: OBB-201292 Description| Value ---|--- Affected Website:| stormy-castle-1476.herokuapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

Tests Crypto Libraries Against Known Attacks: Wycheproof

Rests Crypto Libraries Against Known Attacks Project Wycheproof tests crypto libraries against known attacks. It is developed and maintained by members of Google Security Team, but it is not an official Google product. In cryptography, subtle mistakes can have catastrophic consequences. Good...

Several Security Defects in the Bouncy Castle Crypto APIs

The Legion of the Bouncy Castle reports: Release: 1.56 2.1.4 Security Related Changes and CVE's Addressed by this Release: multiple...

The RFC 5114 saga

Back in January I posed a question "to the Internet": What the heck is RFC 5114? It looks like a lot happened since then around it. I would like to use this post to recollect some of the stuff around RFC5114 . Chapter 0: October 2007 RFC5114 draft was submitted to the IETF . Chapter I: January 20...

DNS reconnaissance tool: Fierce

Fierce is a DNS reconnaissance tool for locating non-contiguous IP space Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It’s really meant as a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of those require...

Monster Castle - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Monster Castle published at the 'play' market has multiple vulnerabilities...

Pororo to the Cookie Castle - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pororo to the Cookie Castle published at the 'play' market has multiple vulnerabilities...

Princess Pet Castle - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Princess Pet Castle published at the 'play' market has multiple vulnerabilities...

Castle Blocks - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Castle Blocks published at the 'play' market has multiple vulnerabilities...