find-a-car.info Open Redirect vulnerability

Open Bug Bounty ID: OBB-322737 Description| Value ---|--- Affected Website:| find-a-car.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

dominionelectric.com XSS vulnerability

Vulnerable URL: http://www.dominionelectric.com/index.jsp?path=find="'--!confirmOPENBUGBOUNTY...

Mobile Menace Monday: Implications of Google Play Protect

Along with the recent release of Google’s new OS, Android 8.0 Oreo, they also released a new security suite known as Google Play Protect. As blogged about in July in Play Protect: Android’s new security system is now available, this new suite has been available since mid-May. To reiterate As note...

Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update

Sarahah, the anonymous messaging app that shot to the top of app stores earlier this summer, says it plans to remove a feature that uploads users’ contacts, including phone numbers and email addresses to the company’s servers, in the next update. The app’s creator, Zain al-Abidin Tawfiq, caught...

Beware! Viral Sarahah App Secretly Steals Your Entire Contact List

Are you also one of those 18 Million users using SARAHAH? You should beware of this app because the anonymous feedback application may not be as private as it really sounds. Sarahah is a newly launched app that has become one of the hottest iPhone and Android apps in the past couple of weeks,...

Internet Download Manager 6.28 Build 17 - Local Buffer Overflow (SEH Unicode)

!/usr/bin/python Exploit Title: Internet Download Manager 6.28 Build 17 - 'Find file' SEH Buffer Overflow Unicode Date: 14-06-2017 Exploit Author: f3ci Tested on: Windows 7 SP1 x86 How to exploit: Open IDM - Downloads - Find - paste exploit string into 'Find file' text field msfvenom -p...

Ledger Denial of Service Vulnerability

Ledger is a powerful double-entry bookkeeping system accessible from the UNIX command line. A denial of service vulnerability exists in the findoption function in option.cc in Ledger, which can be exploited by a remote attacker to cause a denial of service stack buffer overflow and application...

carprices.com XSS vulnerability

Vulnerable URL: http://www.carprices.com/find/105+';";;---- OmniGooch --;'+dist ASC+Xz4?id=blank Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1115114 VIP website status:| No...

Play Protect: Android’s new security system is now available

Play Protect, a security suite for Android devices, was originally introduced in mid-May of this year during the Google I/O conference. And in just a couple of months, the tech giant has made it available for all their mobile users. Play Protect is the amalgamation of Google’s Android security...

Unspecified Vulnerability in Apple iPhone and iPod touch iOS Find My iPhone

Apple iOS on iPhone 3G and iPod touch is an operating system from Apple Inc. for the iPhone 3G and iPod touch.Find My iPhone is a component that provides the ability to retrieve an accidentally lost iPhone.... A security vulnerability exists in the Find My iPhone component of iOS versions 2.0...

Internet Explorer help

None None...

autoshopper.com XSS vulnerability

Vulnerable URL: http://www.autoshopper.com/findadealer/fadresults.asp?distance=50=1"...

research.udmercy.edu XSS vulnerability

Vulnerable URL: http://research.udmercy.edu/find/bysubject/databases.php?disciplineid=1"...

autismtherapies.com XSS vulnerability

Open Bug Bounty ID: OBB-255474 Description| Value ---|--- Affected Website:| autismtherapies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

radare2 'find_eoq' function denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'findeoq' function in the libr/core/cmd.c file in radare2 version 1.5.0. A remote attacker can exploit this vulnerability to cause a denial of service heap out-of-bounds read and...

GnuTLS libtasn1 "asn1_find_node()" buffer overflow vulnerability

Libtasn1 is the ASN.1 library used by GnuTLS. A buffer overflow vulnerability exists in the "asn1findnode" function in lib/parseraux.c in the GnuTLS libtasn1, which could allow an attacker to stack buffer overflows by tricking the user into processing specially designed job files through utilitie...

dynacare.ca XSS vulnerability

Vulnerable URL: https://www.dynacare.ca/find-a-test.aspx?sa=Q"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 415960 VIP website status:| No Check dynacare.ca SSL connection:|...

finde-offen.de XSS vulnerability

Open Bug Bounty ID: OBB-242635 Description| Value ---|--- Affected Website:| finde-offen.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

clevelandbrothers.com XSS vulnerability

Open Bug Bounty ID: OBB-242140 Description| Value ---|--- Affected Website:| clevelandbrothers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Adds New Behavior-Based Malware Scanner To Every Android Device

In order to keep its billions of users safe, Google has introduced another security defense for its Android devices, called Google Play Protect. Google Play Protect, which is part of the Google Play Store app, uses machine learning and app usage analysis to weed out the dangerous and malicious...