SUSE: Security Advisory (SUSE-SU-2019:2736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : ceph, ceph-iscsi, ses-manual_en (SUSE-SU-2019:2736-1)

This update for ceph, ceph-iscsi and ses-manualen fixes the following issues : Security issues fixed : CVE-2019-10222: Fixed RGW crash caused by unauthenticated clients. bsc1145093 Non-security issues-fixed: ceph-volume: prints errors to stdout with --format json bsc1132767 mgr/dashboard: Changin...

X (Formerly Twitter): url that twitter mobile site can not load

Summary: A url that twitter mobile site can not load, crushes any page containing this url Description: Invalid hex characters crushes twitter mobile site as example go to https://mobile.twitter.com/?%xx twitter won't load. 1 Sending such url on a direct message, twitter will no longer be able to...

WinSCP 5.9.4 LIST Denial Of Service

Exploit Title: WinSCP 5.9.4 - LIST Command Denial of service Crush application Date: 4-4-2017 mm.dd.yy Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Home Page: https://winscp.net/eng/index.php Vendor download link: https://winscp.net/download/WinSCP-5.9.4-Setup.exe...

Candy Crush Saga - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Candy Crush Saga published at the 'play' market has multiple vulnerabilities...

Forest Crush Tour - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Forest Crush Tour published at the 'play' market has multiple vulnerabilities...

Lost Jewel Crush - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lost Jewel Crush published at the 'play' market has multiple vulnerabilities...

High School Crush Date - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application High School Crush Date published at the 'play' market has multiple vulnerabilities...

Campus Crush - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Campus Crush published at the 'play' market has multiple vulnerabilities...

Motor Bike Crush Simulator 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Motor Bike Crush Simulator 3D published at the 'play' market has multiple vulnerabilities...

Bubble Crush Challenge - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bubble Crush Challenge published at the 'play' market has multiple vulnerabilities...

Crush Eggs - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Crush Eggs published at the 'play' market has multiple vulnerabilities...

Candy Crush Android Theme - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Candy Crush Android Theme published at the 'play' market has multiple vulnerabilities...

TIPS Candy Crush Saga - Corrupted files, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application TIPS Candy Crush Saga published at the 'play' market has multiple vulnerabilities...

Tomabo MP4 Converter 3.10.12 - 3.11.12 (.m3u) Denial of service (Crush application)

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Tomabo MP4 Converter 3.10.12 - .m3u Denial of service Crush application Date: 8-10-2015 Exploit Author: M.Ibrahim email protected E-Mail: vulnbug gmail.com Vendor Homepage:...

Design/Logic Flaw

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7390

CVE-2014-7390 concerns the Android app “The Enchanted Fashion Crush” (package com.tabtale.springcrushbundleint) version 1.0.0, where SSL TLS server certificate verification is not performed. This enables a man-in-the-middle attacker to spoof the server and obtain sensitive data via a crafted cert...

CVE-2014-7390

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Crush FTP 5 'APPE' command Remote JVM BSOD PoC Exploit

No description provided by source. Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python...

Crush FTP 5 - 'APPE' Remote JVM Blue Screen of Death (PoC)

Exploit Title: Crush FTP 5 'APPE' command Remote BSOD Poc Exploit Date: 06/09/2011 Author: BSOD Digital Fabien DROMAS Mail: [email protected] Test: OS: Windows 7 Versions: 5.7.096 Link: https://www.crushftp.com/early5/CrushFTP5PC.zip !/usr/bin/env python import socket host = rawinput"Type...