req.hit-parade.com XSS vulnerability

Open Bug Bounty ID: OBB-700414 Description| Value ---|--- Affected Website:| req.hit-parade.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

hit-keller.de XSS vulnerability

Open Bug Bounty ID: OBB-596431 Description| Value ---|--- Affected Website:| hit-keller.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Spectre and Meltdown Attacks

After a week or so of rumors, everyone is now reporting about the Spectre and Meltdown attacks against pretty much every modern processor out there. These are side-channel attacks where one process can spy on other processes. They affect computers where an untrusted browser window can execute cod...

The Forrester Wave Ranks Imperva as a Leader for DDoS Mitigation Providers

Imperva has tracked the DDoS threat for some time now. Back in 2014 we saw the rise of DDoS botnets. In 2015, we revealed one of the first IoT-based DDoS attacks. Last year, we predicted and then documented one of the largest botnet-based DDoS attacks. DDoS mitigation, as it turns out, is the...

DuckieTV CMS 1.1.5 Local File Inclusion Vulnerability

Exploit for php platform in category web applications | | Exploit Title: DuckieTV CMS Local File Inclusion | Exploit Author: Ashiyane Digital security Team | Vendor Homepage: http://schizoduckie.github.io/DuckieTV/ | Software Link: https://github.com/SchizoDuckie/DuckieTV/archive/angular.zip |...

DuckieTV CMS 1.1.5 Local File Inclusion

| | Exploit Title: DuckieTV CMS Local File Inclusion | Exploit Author: Ashiyane Digital security Team | Vendor Homepage: http://schizoduckie.github.io/DuckieTV/ | Software Link: https://github.com/SchizoDuckie/DuckieTV/archive/angular.zip | Version: DuckieTV 1.1.5 | Date: 2017-10-14 | Category:...

SQL injection vulnerability in ZZCMS jsout/hit.php file

ZZCMS is a PHP-written enterprise website builder. ZZCMS jsout/hit.php file SQL injection vulnerability, the vulnerability is caused by the failure to effectively filter the editor parameter due to the attacker to obtain sensitive database information...

CVE-2016-7438

The C software implementation of ECC in wolfSSL formerly CyaSSL before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences...

CVE-2016-7438

The CVE-2016-7438 entry concerns wolfSSL (formerly CyaSSL) and its C software implementation of ECC. Affected is wolfSSL versions before 3.9.10, where the ECC code enables local attackers to more easily discover RSA keys by exploiting cache-bank hit differences. The impact is local, with partial ...

CVE-2016-7439

CVE-2016-7439 affects the C RSA implementation in wolfSSL (formerly CyaSSL) prior to 3.9.10. The vulnerability allows a local attacker to obtain RSA keys by exploiting cache-bank hit differences, i.e., an information-disclosure issue. Affected products/versions are wolfSSL before 3.9.10; impact i...

Microsoft Tears off the Band-Aid with EMET

Microsoft last week extended the end-of-life expiration date to July 2018 on its exploit mitigation add-on, the Enhanced Mitigation Experience Toolkit EMET. But for some time, the once-useful tool has been well on its way out to pasture. While EMET was never meant to be anything more than stopgap...

Vulnerability of Firefox and Firefox ESR browsers, allowing attackers to execute arbitrary code

The vulnerability of the nsDisplayList::HitTest function in Firefox and Firefox ESR browsers is related to incorrect display of changes on the screen. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Mozilla: Type confusion in display transformation (MFSA 2016-78)

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."...

Power Hit Radio - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Hit Radio published at the 'play' market has multiple vulnerabilities...

Smash Hit - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Smash Hit published at the 'play' market has multiple vulnerabilities...

Quick Hit Casino - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Quick Hit Casino published at the 'play' market has multiple vulnerabilities...

​Tank Hit - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application ​Tank Hit published at the 'play' market has multiple vulnerabilities...

HIT RADIO FFH - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application HIT RADIO FFH published at the 'play' market has multiple vulnerabilities...

Microsoft Brings Perfect Forward Secrecy to Windows

Microsoft yesterday added four cryptographic cipher suites to its default priority ordering list in Windows, a move that brings Perfect Forward Secrecy to the operating system. Update 3042058 is available for now only on the Microsoft Download Center, affording users the opportunity to test the...

Fake Hit Generator <= 2.2 Shell Upload Vulnerability

No description provided by source. Exploit Title: Fake Hit Generator Shell Upload Vulnerability Date: 25.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and All 1923turk.biz Members Version: 2.1 Dork: Upload unique IP List: and The Ultimate Fake Hit Generator - BOOST YOUR ALEXA RANK...