Chef Server Hostname Detection

Binary data 7231.pasl...

Chef Server Detection

Binary data 9573.prm...

Chef Client Detection

Binary data 9574.prm...

chef-studio.com XSS vulnerability

Vulnerable URL: http://www.chef-studio.com/achat/recherche.php?motclef=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%3C%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:28 GMT Vulnerability type:| XSS Vulnerability status:|...

CVE-2016-4326

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

CVE-2016-4326

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

Code injection

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

CVE-2016-4326

The CVE-2016-4326 vulnerability affects the Chef Manage (formerly opscode-manage) add-on for Chef, where versions up to and including 1.11.4 deserialize cookie data insecurely. The underlying issue is deserialization of untrusted cookie data, which can be exploited by an unauthenticated remote at...

CVE-2016-4326

The Chef Manage formerly opscode-manage add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serialized data in a cookie...

Chef Manage cookie data arbitrary code execution vulnerability

Chef is a management system that targets IT professionals and provides configuration management and automation capabilities for the entire infrastructure.Chef Manage is an enterprise-grade Chef plug-in. Chef Manage fails to properly validate user-supplied cookie data, allowing remote attackers to...

Chef Manage deserializes cookie data insecurely

Overview Chef Manage add-on, version 1.11.4 and earlier, deserializes cookie data insecurely, which may be leveraged to gain unauthenticated remote code execution. Description CWE-502: Deserialization of Untrusted Data - CVE-2016-4326Chef with the Chef Manage previously known as 'opscode-manage'...

My Baby Panda Chef - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application My Baby Panda Chef published at the 'play' market has multiple vulnerabilities...

Kids Chef - learn Math - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Kids Chef - learn Math published at the 'play' market has multiple vulnerabilities...

Crazy Cooking Chef - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Cooking Chef published at the 'play' market has multiple vulnerabilities...

Baby Chef - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Baby Chef published at the 'play' market has multiple vulnerabilities...

Burger Chef - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Burger Chef published at the 'play' market has multiple vulnerabilities...

Donut Recipe: Pastry Chef Kids - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Donut Recipe: Pastry Chef Kids published at the 'play' market has multiple vulnerabilities...

Chef Town: Cooking Simulation - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Chef Town: Cooking Simulation published at the 'play' market has multiple vulnerabilities...

Happy Chef 2 - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Happy Chef 2 published at the 'play' market has multiple vulnerabilities...

Happy Chef - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Happy Chef published at the 'play' market has multiple vulnerabilities...