Lybrate - Consult a Doctor - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Lybrate - Consult a Doctor published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-1868. Reason: This candidate is a reservation duplicate of CVE-2016-1868. Notes: All CVE users should reference CVE-2016-1868 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-0722

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of...

Drupal Video Consultation Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. video Consultation is one of the video communication software modules. A cross-site scripting vulnerability exists in the Drupal Video Consultation module. A remote attacker can use th...

Cross site scripting

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5492

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5492

CVE-2015-5492 : A cross-site scripting (XSS) vulnerability was reported in the Drupal Video Consultation module, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected are all versions of the Video Consultation module (Drupal core not affected). The iss...

Threat Outbreak Alert RuleID16448: Email Messages Distributing Malicious Software on July 8, 2015

Medium Alert ID: 39674 First Published: 2015 July 7 19:20 GMT Last Updated: 2015 July 9 13:38 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16448KVR may...

Video Consultation - Moderately Critical - Cross Site Scripting (XSS) - Unsupported - SA-CONTRIB-2015-105

Video Consultation module integrates VideoWhisper Video Consultation software with Drupal. The module doesn't sufficiently sanitize user supplied text, thereby exposing a Cross Site Scripting vulnerability. CVE identifiers issued CVE-2015-5492 Versions affected All versions of Video Consultation...

CVE-2012-3541

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

某政府行政审批系统咨询处sql注入漏洞

简要描述： 女神是什么？ 详细说明： 关键词 inurl:/OnlineQuery/QueryDetail.aspx? 关键词仅供参考 部分网站不存在注入， 可能是版本的原因。 举几个例子 注入地址:http://shenpi.yuzhou.gov.cn/OnlineQuery/QueryDetail.aspx?QueryId=487 sqlmap/1.0-dev - automatic SQL injection and database takeover tool http://www.sqlmap.org ! legal disclaimer: usage of sqlmap fo...

LinkedIn Intro Service to Shut Down March 7

LinkedIn announced on Friday it was shuttering its four-month-old Intro service which stirred up a privacy meltdown shortly after its release in October. Intro was an integrated service for iOS which sat as a proxy between the built-in iOS mail client and the user’s email provider. Intro would...

Serco: 'Sophisticated' Attack On U.S. Govt. Pension Plan Nets Info On 123k

Serco Inc., a well-known contractor working with the U.S. government, announced that it was the target of a sophisticated attack that exposed data on 123,000 civil employees of the Federal government and their families, including names, addresses and social security numbers taken from the company...

PCI DSS Compliance : Remote Access Software Has Been Detected

Due to increased risk to the cardholder data environment when remote access software is present, 1 justify the business need for this software to the ASV and confirm it is implemented securely, or 2 confirm it is disabled/ removed. Consult your ASV if you have questions about this Special Note...

Joomla Free Consultation Shell Upload

Exploit Title :Joomla comfreeconsulation component shell Upload Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 18-06-2011 + category: Web Apps Dork: "index.php?option=comfreeconsulation" Vulnerability: Shell Upload Vulnerability...

Guru JustAnswer Professional 1.25 - Multiple SQL Injections

Guru JustAnswer Professional 1.25 - Multiple SQL Injections / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

VideoWhisper Video Consultation Xss Vulnerabilities

Exploit for php platform in category web applications =================================================== VideoWhisper Video Consultation Xss Vulnerabilities =================================================== To accomplish great things, we must dream as well as act...

The 5 claims of PCI DSS snake oil salesmen

The Payment Card Industry Data Security Standard PCI DSS is fast becoming the de facto standard for securing critical infrastructure across many industries. This is because a large number of businesses much larger than originally envisioned process credit cards and are, therefore, required to be...