The Last Door: Season 2 - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application The Last Door: Season 2 published at the 'play' market has multiple vulnerabilities...

February 2017 security update release

UPDATE: 2/15/17: We will deliver updates as part of the planned March Update Tuesday, March 14, 2017. Our top priority is to provide the best possible experience for customers in maintaining and protecting their systems. This month, we discovered a last minute issue that could impact some custome...

tintakiado.hu XSS vulnerability

Vulnerable URL: http://www.tintakiado.hu/newsview.php?id=99%27"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1366159 VIP website status:| No Check tintakiado.hu SSL connection...

vojvodina.gov.rs XSS vulnerability

Vulnerable URL: http://www.vojvodina.gov.rs/galerija.php?id=247119 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 350595 VIP website status:| No Check vojvodina.gov.rs SSL...

bluegrasswildwater.org XSS vulnerability

Vulnerable URL: http://bluegrasswildwater.org/npff/webid/profile.php?userid=1id=262" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6667040 VIP website status:| No Check...

The Last Door: Collector's Ed - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application The Last Door: Collector's Ed published at the 'play' market has multiple vulnerabilities...

espanamapa.com XSS vulnerability

Vulnerable URL: https://www.espanamapa.com/enc/ral249"/-3.7026,40.4165/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 653543 VIP website status:| No Check espanamapa.com SSL...

escuelas.mendoza.gov.ar XSS vulnerability

Vulnerable URL: http://escuelas.mendoza.gov.ar/buscador?busqueda= XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Bitrix Site Manager Cross Site Scripting

Hello list! There is Cross-Site Scripting vulnerability in Bitrix Site Manager. ------------------------- Affected products: ------------------------- Vulnerable was the last version of Bitrix Site Manager at 12.06.2015, when I found this vulnerability on web site of Russian terrorists. At that...

CVE-2016-7569

Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. dot dot in the embedded layer data in an image...

reloadinginternational.com XSS vulnerability

Vulnerable URL: http://www.reloadinginternational.com/page.php?p=internationalcustomers%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

oyunsunucum.com XSS vulnerability

Vulnerable URL: http://oyunsunucum.com/osbuy.php?productid=19%22%3Etyler%3Cscript%3Econfirm/OPENBUGBOUNTY/%3C/script%3Etyler%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

gossiptop.info XSS vulnerability

Vulnerable URL: http://gossiptop.info/sinhala-show.php?id=14132%27"--!=snews' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 368247 VIP website status:| No Check gossiptop.info SSL...

nwfa.mmu.ac.uk XSS vulnerability

Vulnerable URL: http://www.nwfa.mmu.ac.uk/bbc/bbcnews/defaulttwocolumn.php?skip=0========= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

infoservis.ckrumlov.info XSS vulnerability

Vulnerable URL: http://infoservis.ckrumlov.info/php/webcam/middle.php?〈=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

hillsresidential.co.uk XSS vulnerability

Vulnerable URL: http://www.hillsresidential.co.uk/properties/search-results.html?txtQuickSearch=Salford"--!"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10141762 VIP website...

one2up.com XSS vulnerability

Vulnerable URL: http://www.one2up.com/listcontent.php?txtSearch=GIDtype=memberdisplayname Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 32611 VIP website status:| Yes Check...

ISC BIND 'nxdomain-redirect' Feature Response DoS Vulnerability - Windows

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

123bee.com XSS vulnerability

Vulnerable URL: http://www.123bee.com/search.html?keyword=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18061...

Malware exploit: Dakcomet

Dakcomet Kevin Breen - DarkComet From Defense To Offense - Identify your Attacker Slides POC by Shawn Denbow and Jesse Herts Wikipedia Vulnerabilities Remote file read Data base poisoning SQL injection DarkComet ToolKit DarkComet Metasploit Module Last updated on 14th Jan 2017 None...