CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

The vulnerability CVE-2015-8621 affects the t-coffee tool (versions before 11.00.8cbe486-2). It is an out-of-bounds/write vulnerability that allows a local attacker to write to the user’s home file: ~/.t_coffee, i.e., a local write to a user file globally. Impact is confined to local access; expl...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

Coffee Ripples - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Coffee Ripples published at the 'play' market has multiple vulnerabilities...

Man In The Middle (MitM)

ipip-coffee is vulnerable to man-in-the-middle MitM attacks. It downloads geolocation resources over HTTP, which leaves it vulnerable to MitM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an application...

Downloads Resources over HTTP

Overview Affected versions of ipip-coffee insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decision...

How to hack a smart Coffee Machine-vulnerability warning-the black bar safety net

! As the physical network of the popularity, its safety is particularly important, recently there are foreign hackers to hack a smart Coffee Machine, the following look together. The story causes Recently an Italian hacker Simone Margaritelli crack a smart coffee machine, and Simone is a mobile...

My Coffee Shop - Coffeehouse - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application My Coffee Shop - Coffeehouse published at the 'play' market has multiple vulnerabilities...

Barista Coffee Art Design Cafe - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Barista Coffee Art Design Cafe published at the 'play' market has multiple vulnerabilities...

Coffee cup frames - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coffee cup frames published at the 'play' market has multiple vulnerabilities...

Virtual Coffee - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Virtual Coffee published at the 'play' market has multiple vulnerabilities...

Cezve Coffee Oracle - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cezve Coffee Oracle published at the 'play' market has multiple vulnerabilities...

javajoescoffeehouse.com XSS vulnerability

Vulnerable URL: https://www.javajoescoffeehouse.com/shop/imageview.asp?file=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8820482...

coffee-wonders.com XSS vulnerability

Open Bug Bounty ID: OBB-75920 Description| Value ---|--- Affected Website:| coffee-wonders.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Keurig 2.0 Authentication Bypass

Overview Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup. Impact CVSS Base Score: 4.9 Impact Subscore: 6.9 Exploitabilit...

CVE-2014-7012

The Coffee Inn aka lt.lemonlabs.android.coffeeinn application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Coffee Inn aka lt.lemonlabs.android.coffeeinn application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7012

The Coffee Inn aka lt.lemonlabs.android.coffeeinn application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

WordPress Coffee Break Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...