An All In One Information Gathering Tool: RED HAWK

RED HAWK is An All In One Tool For Information Gathering, SQL Vulnerability Scanning and Crawling.Coded In PHP Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup IMPROVED...

NextGEN Gallery geo <= 1.0 - Unauthenticated PHP Object Injection

The plugin nextgen-gallery-geo insecurely trusts serialized data submitted over AJAX requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. The original researcher notified the WordPress Plugins team. PoC Attack is exploitable over AJAX calls sites with...

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

The plugin my-geo-posts-free insecurely trusts serialized data submitted over HTTP requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. PoC Attack is exploitable over HTTP requests to sites with the my-geo-posts-free Plugin. The original researcher...

Best Practices for deploying PVS in multi-geo environments

In scenarios where companies have a Global presence with multiple geographical locations, it is sometimes desirable to have a Provisioning Services Farm that spans multiple locations across the globe. PVS requires a constant andreliable connection to the SQL database. If there's a delay in...

Debian: Security Advisory (DSA-3764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9889

Some forms with the parameter geozoomleveltofoundlocation in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and articleimage.php. The impact is XSS...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

Design/Logic Flaw

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

CVE-2016-5508 affects Oracle Sun Systems Products Suite Solaris Cluster 4.3, specifically the Cluster Geo subcomponent. The vulnerability is described as an unspecified local vulnerability in Solaris Cluster that can affect confidentiality. Technical details in connected documents show a local-pr...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

daloRADIUS 0.9-9 SQL Injection / Code Execution Vulnerabilities

Exploit for php platform in category web applications Abstract -------- "daloRADIUS is an advanced RADIUS web management application aimed at managing hotspots and general-purpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine and integrates with...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Cluster Component (CNVD-2016-09693)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Solaris Cluster is one of the enterprise cluster components for the Oracle Sun Solaris operating system. A local security vulnerability exists in the Cluster Geo subcomponent of the Solaris Cluster...

Photos On Dark Web Reveal Geo-locations Of 229 Drug Dealers — Here's How

It's a Fact! No matter how smart the criminals are, they always leave some trace behind. Two Harvard students have unmasked around 229 drug and weapon dealers with the help of pictures taken by criminals and used in advertisements placed on dark web markets. Do you know each image contains a rang...

Geo News - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Geo News published at the 'play' market has multiple vulnerabilities...

GEO EPOCHE | Geschichtsmagazin - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GEO EPOCHE | Geschichtsmagazin published at the 'play' market has multiple vulnerabilities...

GEO Magazin - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GEO Magazin published at the 'play' market has multiple vulnerabilities...

Uber: Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers

m.uber.com has an endpoint at https://m.uber.com/proxy-rt/product/city/rider-view that when called will return a list of nearby vehicles. By iterating through all latitudes and longitudes, it is possible to count the total number of active Uber drivers. The full URL to be called is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...