China Gadgets - Die Gadget App - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application China Gadgets - Die Gadget App published at the 'play' market has multiple vulnerabilities...

DIE HARKE - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DIE HARKE published at the 'play' market has multiple vulnerabilities...

DIE ZEIT E-Paper App - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DIE ZEIT E-Paper App published at the 'play' market has multiple vulnerabilities...

DIE PTA - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DIE PTA published at the 'play' market has multiple vulnerabilities...

TimeZapp - Die Frage-App - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TimeZapp - Die Frage-App published at the 'play' market has multiple vulnerabilities...

360° online – Die App - Corrupted files, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 360° online – Die App published at the 'play' market has multiple vulnerabilities...

Der Die Das - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Der Die Das published at the 'play' market has multiple vulnerabilities...

die-waescherei.de XSS vulnerability

Vulnerable URL: http://die-waescherei.de/Suche?suchtext=asd"=Suchen Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1310216 Google Pagerank| 2 VIP website...

Wordpress auto-thickbox-plus plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin auto-thickbox-plus XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/auto-thickbox-plus/ Google dork: inurl:/wp-content/plugins/auto-thickbox-plus The code in...

die-weingalerie.ch XSS vulnerability

Vulnerable URL: http://www.die-weingalerie.ch/shop/cem/search/?query="';-- Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2163605 Google Pagerank| 2 VIP...

ratgeber.die-stromsparinitiative.de XSS vulnerability

Open Bug Bounty ID: OBB-53073 Description| Value ---|--- Affected Website:| ratgeber.die-stromsparinitiative.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

PrisonLocker Ransomware Emerges From Criminal Underground

Security researchers from Malware Must Die uncovered new ransomware called PrisonLocker, and said the malware author is either a legitimate security researcher or is posing as one via a personal blog and Twitter handle. Malware Must Die has monitored PrisonLocker’s development since spotting it f...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...

Plugins Dll Hijacking Exploit

Exploit for windows platform in category local exploits ============================= Plugins Dll Hijacking Exploit ============================= Exploit Title: Dll Hijacking Exploit Application: Application plugin support Date: 07 Sept 2010 Author: STRELiTZIA Version: %Applications list% Tested...

Savant 3.1 Web Server Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Savant/3.1/ include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'Savant 3.1 Web Server...

cpCommerce 1.2.x File Inclusion

!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...

cpCommerce 1.2.x GLOBALS[prefix] Arbitrary File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit ================================================================= !/usr/bin/perl cpCommerce 1.2.x GLOBALSpref...

Ubuntu Update for firefox, firefox-3.0, xulrunner-1.9 vulnerabilities USN-667-1

Ubuntu Update for Linux kernel vulnerabilities USN-667-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6671.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox, firefox-3.0, xulrunner-1.9 vulnerabilities USN-667-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Forced mouse drag — Mozilla

Mozilla developer Paul Nickerson reported a variant of a click-hijacking vulnerability discovered in Internet Explorer by Liu Die Yu. The vulnerability allowed an attacker to move the content window while the mouse was being clicked, causing an item to be dragged rather than clicked-on. This issu...

SA-2008-006 - Drupal core - Cross site scripting (UTF8)

When outputting plaintext Drupal strips potentially dangerous HTML tags and attributes from HTML, and escapes characters which have a special meaning in HTML. This output filtering secures the site against cross site scripting attacks via user input. Certain byte sequences that are invalid in the...