Talking Cat Vs. Mouse - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Cat Vs. Mouse published at the 'play' market has multiple vulnerabilities...

天融信Topsec系统 getMacAddr.php 命令执行

getMacAddr.php: code 区域 '; ? 跟进getMacAddrFromIfName code 区域 function getMacAddrFromIfName$ifName $mac = execute'cat /sys/class/net/' . trim$ifName . '/address'-get'output'; if$mac != null && $mac != '' return $mac0; else return ''; http://218.206.217.19:8080/acc/network/getMacAddr.php?eth= | echo...

Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL

Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL. Shellcode exploit for linx86 platform / --------------------------------------------------------------------------------------------------- Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL - 75 bytes Tested in Zorin OS 10...

linux/x86 - execve("/bin/cat", ["/bin/cat", "/etc/passwd"], NULL

/ --------------------------------------------------------------------------------------------------- Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL - 75 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Ma...

Black Cat CMS 1.1.2 Cross Site Scripting

​ Affected software: black cat cms Type of vulnerability:stored xss URL:http://blackcat-cms.org/ Discovered by: provensec Website: provensec.com version:BlackCat CMS 1.1.2 Proof of concept​ goto ad group page http://demo.opensourcecms.com/blackcat/backend/groups/index.php and and new group with...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 14...

linux/x86 setuid(0) + setgid(0) + execve("/bin/cat", "/etc//shadow") - 52 by

// linux/x86 setuid0 + setgid0 + execve"/bin/cat", "/etc//shadow" - 52 bytes // Febriyanto Nugroho include char shellcode = "\x6a\x17\x58\xcd\x80\x6a\x2e" "\x58\xcd\x80\x6a\x0b\x58\x99" "\x52\x68\x61\x64\x6f\x77\x68" "\x2f\x2f\x73\x68\x68\x2f\x65" "\x74\x63\x89\xe1\x52\x68\x2f"...

linux/x86 to see /proc/sys/kernel/randomize_va_space - 79 bytes

/ Exploit Title : linux/x86 execve"/bin/cat", "/bin/cat", "/proc/sys/kernel/randomizevaspace", NULL - 79 bytes Exploit Author : Febriyanto Nugroho Tested on : Linux Debian 5.0.5 / include char shellcode = "\x31\xdb" "\x6a\x17" "\x58" "\xcd\x80" "\x8d\x43\x0b" "\x99" "\x52" "\x68\x2f\x63\x61\x74"...

linux/x86 execve("/bin/cat", "/etc/gshadow") - 44 bytes

/ Exploit Title : linux/x86 execve"/bin/cat", "/bin/cat", "/etc/gshadow", NULL - 44 bytes Exploit Author : Febriyanto Nugroho Tested on : Linux Debian 5.0.5 / include char shellcode = "\x31\xdb" "\x8d\x43\x0b" "\x99" "\x52" "\x68\x2f\x63\x61\x74" "\x68\x2f\x62\x69\x6e" "\x89\xe3" "\x52"...

CVE-2015-2678

Multiple cross-site scripting XSS vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter in the categories page to gxadmin/index.php or 2 page parameter to index.php...

CVE-2015-1385

Cross-site scripting XSS vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a powerpress-editcategoryfeed action in the powerpressadmincategoryfeeds.php page to...

PT-2015-5258 · Blubrry · Blubrry Powerpress Podcasting Plugin

Name of the Vulnerable Software and Affected Versions: Blubrry PowerPress Podcasting plugin versions prior to 6.0.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a "powerpress-editcategoryfeed" action in the "powerpressadmin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 notes parameter to the client page; 4 insuname or 5 price parameter to the addinsurancecat page; or 6 status parameter to the...

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video:...

BlackCat CMS 1.0.3 Cross Site Scripting

Advisory ID: HTB23228 Product: BlackCat CMS Vendor: Black Cat Development Vulnerable Versions: 1.0.3 and probably prior Tested Version: 1.0.3 Advisory Publication: August 13, 2014 without technical details Vendor Notification: August 13, 2014 Vendor Patch: August 13, 2014 Public Disclosure:...

How to Weaponize your Cat to Hack Neighbours’ Wi-Fi Passwords

What do you expect from your cat to come back with?? Perhaps with a mouse or a bird – none of your use. But what if she come back with your neighbours’ wifi details? Really Interesting! A creative security researcher has found a way to use his pet cat mapping dozens of vulnerable Wi-Fi networks i...

Code injection

WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the 1 js or 2 cat parameter...

phpBB Fishing Cat Portal Addon - 'functions_portal.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28708/info Fishing Cat Portal Addon for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...

photokorn 1.53/1.54 print.php cat Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17683/info Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...

Realtor WebSite System E-Commerce SQL Injection Vulnerability

No description provided by source. =============================================== Realtor WebSite System E-Commerce SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || ||...