Dojo by BullGuard - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dojo by BullGuard published at the 'play' market has multiple vulnerabilities...

How to set customized BIOS strings to HVM VMs

This article describes the method to set customized BIOS strings to HVM VMs through xe CLI of XenServer 7.3 and later, as well as how to get customized BIOS strings on these VMs...

Qwant - Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Qwant published at the 'play' market has multiple vulnerabilities...

Automated WPA Phishing Attacks: WiFiPhisher

Wifiphisher is a security tool that mounts automated victim-customized phishing attacks against WiFi clients in order to obtain credentials or infect the victims with malwares. It is primarily a social engineering attack that unlike other methods it does not include any brute forcing. It is an ea...

colehs.fshisd.net XSS vulnerability

Vulnerable URL: http://colehs.fshisd.net/apps/pages/index.jsp?uRECID=254668=dID=video=1ID=89672%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

clear-reports.com XSS vulnerability

Vulnerable URL: https://www.clear-reports.com/sys/login.php/%22'--!%3E%3CScript%20/K/%3Econfirm'openbugbounty'%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 150741 VIP website status:| No...

wko.at XSS vulnerability

Vulnerable URL: https://www.wko.at/service/suche.html?searchTerm=%27-confirm%285%29-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23959 VIP website status:| Yes Coordinated Disclosure Timeline: Description|...

DumpsterFire - Security Incidents In A Box!

DumpsterFire Toolset - "Security Incidents In A Box!" The DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for building repeatable, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create...

mtsTV GO - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application mtsTV GO published at the 'play' market has multiple vulnerabilities...

cindoc.pcm.gob.pe XSS vulnerability

On the 06.11.2017 security researcher reported a XSS vulnerability affecting the cindoc.pcm.gob.pe website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 6 November, 201...

colgate.com.sa XSS vulnerability

Vulnerable URL: http://www.colgate.com.sa/en/sa/oc/search-results?tag=%22%5C%27%60%3C%2fScrpt%2f%22%27--%21%3E%20%3CScrpt%3E%20alert%28document.domain%29%20%3C%2fScrpt%3E%23 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

t3sandbox.org XSS vulnerability

Vulnerable URL: https://t3sandbox.org/t3/sandbox/wheat/search.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Val...

منومعاي -بدون اعلانات- صراحة ما يقول عنك الناس؟ - ContentProvider mode not defined, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application منومعاي -بدون اعلانات- صراحة ما يقول عنك الناس؟ published at the 'play' market has multiple vulnerabilities...

國泰優惠－卡友必下載的國泰APP - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 國泰優惠－卡友必下載的國泰APP published at the 'play' market has multiple vulnerabilities...

us.romwe.com XSS vulnerability

Vulnerable URL: http://us.romwe.com/pdsearch/xxx?ref=www%3C/script%3E%27--!%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm1%3E=dir%22%27--!%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm1%3E=us Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:53 GMT...

natal.mx XSS vulnerability

Vulnerable URL: http://natal.mx/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

inbira.com XSS vulnerability

Vulnerable URL: http://www.inbira.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0-g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17748226 VIP...

noordoostfriesland.nl XSS vulnerability

Vulnerable URL: http://www.noordoostfriesland.nl/locaties/surhuisterveen/?locatie=surhuisterveen=%22%27--%21%3E%3CImage+SrcSet%3DK+OnError%3Dconfirm%281%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:|...

tricor.net XSS vulnerability

Vulnerable URL: http://tricor.net/searchresult.php?proptype=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

mec.ca XSS vulnerability

Vulnerable URL: https://www.mec.ca/en/products/c/100?text=aaaaaaaaaaaaaaa" onfocus=alert/OPENBUGBOUNTY/ autofocus a=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...