JVN#71462075: Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting

Splunk Enterprise and Splunk Lite contain a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser by an attacker who can log-in to the system as an administrator. Solution Update the Software Update to the latest version according t...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

Intercepting Proxy for Performing Web Application Security Testing: The Pappy Proxy

Intercepting Proxy for Performing Web application security testing The Pappy P roxy A ttack P roxy P rox Y Proxy is an intercepting proxy for performing web application security testing. Its features are often similar, or straight up rippoffs from Burp Suite . However, Burp Suite is neither open...

WordPress wSecure Lite Plugin Remote Command Execution

A remote code execution vulnerability exists in WordPress wSecure Lite Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress wSecure Lite Plugin <= 2.3 - Remote Code Execution

This plugin is prone to a remote code execution vulnerability, that allows a hacker to do just about anything on a website. Solution Update the plugin...

Kate Mobile Lite для ВКонтакте - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Kate Mobile Lite для ВКонтакте published at the 'play' market has multiple vulnerabilities...

WordPress Pretty Link Lite Plugin <= 1.6.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade plugin...

MemberSonic Lite <= 1.2 - Authentication Bypass

The membersonic-lite WordPress plugin was affected by an Authentication Bypass security vulnerability...

WordPress MemberSonic Lite Plugin <= 1.2 - Authentication BYPASS

Because of this vulnerability, an unauthorized user can login to any account by knowing the email address, which is associated with the account. Solution Update the plugin...

VirIT Explorer Lite / Pro 8.1.68 Privilege Escalation

/ Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Tested on: Windows 7 CVE: TBD CVSS v2: 6.8...

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation

VirIT Explorer Lite Pro 8.1.68 - Local Privilege Escalation / Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro...

VirIT Explorer Lite & Pro 8.1.68 - Local Privilege Escalation

/ Full title: VirIT Explorer Lite & Pro v.8.1.68 Local Privilege Escalation System/Arbitrary Code Execution Exploit Author: Paolo Stagno - [email protected] Vendor Homepage: http://www.tgsoft.it Version: VirIT Explorer Lite & Pro v.8.1.68 Tested on: Windows 7 CVE: TBD CVSS v2: 6.8...

Htcap - web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes

htcap is a web application scanner able to crawl single page application SPA in a recursive manner by intercepting ajax calls and DOM changes. Htcap is not just another vulnerability scanner since it's focused mainly on the crawling process and uses external tools to discover vulnerabilities. It'...

Facebook Lite - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Lite published at the 'play' market has multiple vulnerabilities...

Exploration Lite - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Exploration Lite published at the 'play' market has multiple vulnerabilities...

Christmas Gifts Lite - External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Gifts Lite published at the 'play' market has multiple vulnerabilities...

Talking Moya Hutos Lite - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Moya Hutos Lite published at the 'play' market has multiple vulnerabilities...

Talking Joa Hutos Lite - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Joa Hutos Lite published at the 'play' market has multiple vulnerabilities...

My PlayHome Lite - Doll House - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My PlayHome Lite - Doll House published at the 'play' market has multiple vulnerabilities...

Pepi Bath Lite - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Pepi Bath Lite published at the 'play' market has multiple vulnerabilities...