Tamper proofing review: the iZettle card payment terminal

Tamper resistance is an increasingly important factor in smart devices. Together with secure hardware design and defensive coding, it can deliver a very secure device. One of the most common areas the average consumer will encounter tamper resistant devices is in payment terminals, or Pin Entry...

chipdesignmag.com XSS vulnerability

Open Bug Bounty ID: OBB-595233 Description| Value ---|--- Affected Website:| chipdesignmag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Desigual Mag: Fashion Magazine - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Desigual Mag: Fashion Magazine published at the 'play' market has multiple vulnerabilities...

Shopkins Mag - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Shopkins Mag published at the 'play' market has multiple vulnerabilities...

mag-auto-moto.com Open Redirect vulnerability

Vulnerable URL: http://www.mag-auto-moto.com/dhtml/redirection.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:21 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

Design/Logic Flaw

Pulse Connect Secure aka PCS and formerly Juniper PCS PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished T...

CVE-2015-5369

Pulse Connect Secure (PCS) devices with Hardware Acceleration enabled are affected by CVE-2015-5369 due to improper validation of the TLS Finished handshake, enabling MITM via a crafted Finished message. Affected lines include PCS 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 ...

CVE-2015-5369

Pulse Connect Secure aka PCS and formerly Juniper PCS PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished T...

power-mag.com XSS vulnerability

Vulnerable URL: http://www.power-mag.com/featuredetail.php?id=276%27%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2014-7467

The HoneyBee Mag aka com.magzter.honeybeemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The HoneyBee Mag aka com.magzter.honeybeemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7467

The CVE-2014-7467 entry concerns the HoneyBee Mag Android app (com.magzter.honeybeemag) version 3.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The av...

CVE-2014-7467

The HoneyBee Mag aka com.magzter.honeybeemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)

No description provided by source. !/usr/bin/perl JIKO =JAWAD Thanx To All Friends : Cyber-Zone , Stack , ZoRLu , Hussin X , Mag!c ompo ,Sad Hacker ,Strock ... All MoroCCaN HaCkerS No-Exploit.com EAX 00000000 ECX 41414141 EDX 000008C3 EBX 000FBBD4 ASCII F:\perso\test\tool\jiko.pls ESP 000F7298 EB...

mag-bussum - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Researchers: Square Card Reader Provides Straight Line to Illicit Cash?

Security researchers at the Black Hat Briefings demonstrated a method for turning purloined credit card information into cash, this time using Square, a free credit card reader that promises to turn anyone with a mobile device into a merchant capable of accepting credit card payments. Adam Laurie...

CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio

I. BACKGROUND GNU Tar and GNU Cpio are popular programs for managing archive files. Both programs are included in many linux distributions. GNU Tar is commonly used for exchanging source code archives. Both programs include a client implementation for the remote mag tape protocol rmt. This protoc...

GNU Tar and GNU Cpio heap-based buffer overflow vulnerability

Exploit for unknown platform in category local exploits ============================================================= GNU Tar and GNU Cpio heap-based buffer overflow vulnerability ============================================================= I. BACKGROUND GNU Tar and GNU Cpio are popular programs...

WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)

WM Downloader 3.0.0.9 - PLS WMDownloader PoC !/usr/bin/perl JIKO =JAWAD Thanx To All Friends : Cyber-Zone , Stack , ZoRLu , Hussin X , Mag!c ompo ,Sad Hacker ,Strock ... All MoroCCaN HaCkerS No-Exploit.com EAX 00000000 ECX 41414141 EDX 000008C3 EBX 000FBBD4 ASCII "F:\perso\test\tool\jiko.pls" ESP...

WM Downloader - .m3u Local Stack Overflow (PoC)

WM Downloader - .m3u Local Stack Overflow PoC !/usr/bin/perl WM Downloader .M3U File Local Stack Overflow POC Found By : Cyber-Zone ABDELKHALEK E-mail : [email protected] Home : WwW.IQ-TY.CoM ; WwW.No-Exploit.CoM Greetz : Hussin X , Jiko my brother, ZoRLu , Nabilx , Mag!c ompo , Stack...