Boonex Dolphin 7.3 Authentication Bypass

Exploit Title : Boonex Dolphin all versoin array This will allow the attacker to bypass the authentication and can also enter in admin panel. Already communicated to dolphin developers. https://www.boonex.com/forums/topic/Security-Bug-High-Authentication-bypass.htm Independent Pakistani Security...

Boonex Dolphin 7.3.2 - Authentication Bypass

Exploit Title : Boonex Dolphin all versoin array This will allow the attacker to bypass the authentication and can also enter in admin panel. Independent Pakistani Security Researcher...

Dolphin < 7.3.1 SQLi Vulnerability

Dolphin is prone to an SQL injection SQLi vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Dolphin 'actions.inc.php' SQL Injection Vulnerability

Dolphin is a social networking system. A SQL injection vulnerability exists in Dolphin version 7.3.0. Due to a failure to filter key inputs in actions/inc/php, a remote attacker can execute arbitrary SQL commands via the categorize parameter in a search parameter...

Dolphin 7.3.0 SQL Injection

Exploit Title: Dolphin 7.3.0 Error Based SQL Injection Date: 20-09-2016 Software Link: https://www.boonex.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $REQUEST'key' is not escaped inside...

Dolphin 7.3.0 - Error-Based SQL Injection

Exploit for php platform in category web applications Exploit Title: Dolphin 7.3.0 Error Based SQL Injection Date: 20-09-2016 Software Link: https://www.boonex.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...

Dolphin 7.3.0 - Error-Based SQL Injection

Dolphin 7.3.0 - Error-Based SQL Injection Exploit Title: Dolphin 7.3.0 Error Based SQL Injection Date: 20-09-2016 Software Link: https://www.boonex.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...

Dolphin 7.3.0 - Error-Based SQL Injection

Exploit Title: Dolphin 7.3.0 Error Based SQL Injection Date: 20-09-2016 Software Link: https://www.boonex.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $REQUEST'key' is not escaped inside...

Android security development of ZIP file directory traversal-vulnerability warning-the black bar safety net

ZIP compressed package file to allow the presence of“../”string, an attacker can carefully construct the ZIP file, use multiple“../”thereby changing the ZIP package to a file in the storage position, the cover to replace the application the original file. If the overwritten file is available. so...

Dolphin Detection (HTTP)

HTTP based detection of Dolphin. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.808217";...

Dolphin < 7.0.8 Multiple XSS Vulnerabilities

Dolphin is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Boto the Pink Dolphin - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Boto the Pink Dolphin published at the 'play' market has multiple vulnerabilities...

Dolphin Fortune - Slots Casino - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Fortune - Slots Casino published at the 'play' market has multiple vulnerabilities...

Dolphin club - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin club published at the 'play' market has multiple vulnerabilities...

Dolphin Spins Slot - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Spins Slot published at the 'play' market has multiple vulnerabilities...

Gold Dolphin Casino Slots™ - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Gold Dolphin Casino Slots™ published at the 'play' market has multiple vulnerabilities...

Dolphin Deluxe Slot - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Deluxe Slot published at the 'play' market has multiple vulnerabilities...

Dolphin Translate - Translator - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Translate - Translator published at the 'play' market has multiple vulnerabilities...

ffmpeg -- remote attacker can access local files

Arch Linux reports: ffmpeg has a vulnerability in the current version that allows the attacker to create a specially crafted video file, downloading which will send files from a user PC to a remote attacker server. The attack does not even require the user to open that file — for example, KDE...

wiki.dolphin-emu.org XSS vulnerability

Vulnerable URL: https://wiki.dolphin-emu.org/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:16 GMT Vulnerability type:| XSS Vulnerabili...