はたらくくるまゴーゴー 2歳から遊べる幼児・子供知育アプリ - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application はたらくくるまゴーゴー 2歳から遊べる幼児・子供知育アプリ published at the 'play' market has multiple vulnerabilities...

Big Day - Educational Game - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Big Day - Educational Game published at the 'play' market has multiple vulnerabilities...

Kids Educational Game Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Educational Game Free published at the 'play' market has multiple vulnerabilities...

Educational game for kids math - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Educational game for kids math published at the 'play' market has multiple vulnerabilities...

Kids Educational Game 2 Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Educational Game 2 Free published at the 'play' market has multiple vulnerabilities...

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities

Exploit for php platform in category web applications Administrator optionsModify Current Theme" or use site.com/members/console.php?cID=61. You can then insert the PHP code of your choosing into Footer. In order to add or edit code you are required to provide a special Admin Key that was defined...

mackeeper.com XSS vulnerability

Vulnerable URL: https://mackeeper.com/educational-licenses Details: Description| Value ---|--- Patched:| Yes, at 18.02.2016 Latest check for patch:| 18.02.2016 08:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 816 Google Pagerank| 4 VIP website status:| Yes...

TUDU 0.82 - Local Stack-Based Buffer Overflow Exploit

Exploit for linux platform in category local exploits Exploit Author: Juan Sacco - http://www.exploitpack.com Program: tudu - Command line hierarchical ToDo list Tested on: GNU/Linux - Kali Linux 2.0 x86 Description: TUDU v0.82 and prior is prone to a stack-based buffer overflow vulnerability...

Google Android - Stagefright Remote Code Execution

Google Android - Stagefright Remote Code Execution !/usr/bin/env python Joshua J. Drake @jduck of ZIMPERIUM zLabs Shout outs to our friends at Optiv formerly Accuvant Labs C Joshua J. Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 www.zimperium.com Exploit for RCE Vulnerability CVE-2015-153...

Script Kiddies can Now Create their Own Ransomware using This Kit

Don't panic! You heard it right. A Turkish security researcher named Utku Sen has posted a fully functional Ransomware code on open source code sharing website GitHub. The Ransomware dubbed Hidden Tear, uses AES Encryption to lock down files before displaying a ransom message warning to get users...

WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery

Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site...

D-Link DSL-526B ADSL2+ AU_2.01 - Unauthenticated Remote DNS Change Vulnerability

Exploit for hardware platform in category web applications D-Link DSL-526B ADSL2+ AU2.01 Unauthenticated Remote DNS Change Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg No description for morons, script kiddies & noobs !! Disclaimer: This or...

D-Link DSL-2780B DLink_1.01.14 - Unauthenticated Remote DNS Change Vulnerability

Exploit for hardware platform in category web applications D-Link DSL-2780B DLink1.01.14 Unauthenticated Remote DNS Change Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg No description for morons, script kiddies & noobs !! Disclaimer: This or...

D-Link DSL-526B ADSL2+ AU_2.01 Unauthenticated Remote DNS Change

D-Link DSL-526B ADSL2+ AU2.01 Unauthenticated Remote DNS Change Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg No description for morons, script kiddies & noobs !! Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...

Linux Kernel (PonyOS 3.0) - TTY ioctl() Local Privilege Escalation

Linux Kernel PonyOS 3.0 - TTY ioctl Local Privilege Escalation / Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101;...

PonyOS 3.0 tty ioctl() Privilege Escalation

Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101; printf"- patched syssetuid\n"; asm"movl $0x18,%eax"; asm"xorl...

Pixiewps - Bruteforce Offline the WPS Pin (Pixie Dust Attack)

Pixiewps is a tool written in C used to bruteforce offline the WPS pin exploiting the low or non-existing entropy of some APs pixie dust attack. It is meant for educational purposes only. All credits for the research go to Dominique Bongard. DEPENDENCIES Pixiewps requires libssl. To install it:...

WordPress Encrypted Contact Form 1.0.4 CSRF / XSS

Title: Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL: https://wordpress.org/plugins/encrypted-contact-form/ Vulnerability Type: Cross-site Request Forgery...

Naval Academy Cadets Win NSA Hacking Contest

Midshipmen from the United States Naval Academy in have won the National Security Agency’s Cyber Defense Exercise CDX for the third time. Between April 13 and 17, the CDX pits the U.S. Naval, Air Force, Coast Guard, Merchant Marine and Military Academy and the Royal Military College of Canada...

A common Site Management System any user login/SQL injection/GetShell vulnerabilities source code analysis-vulnerability warning-the black bar safety net

Brief description: This system is not open source, most of the universities in use, turn the source off at the next Detailed description: 0x00 General case: code area Manufacturer: Rio Tinto tech Official website: http://www.ltpower.net/ The main is to do the educational products of the...