CVE-2020-2176

Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting XSS vulnerability exploitable by users able to control the values returned from the useMango service...

CVE-2020-2176

CVE-2020-2176 describes an XSS vulnerability in Jenkins with the useMango Runner Plugin 1.4 and earlier, where multiple form validation endpoints do not escape values received from the useMango service. This allows an attacker who can control returned values to execute scripts in a user’s browser...

Black Hat Video Exclusive: Mobile APTs Redefining Phishing Attacks

LAS VEGAS: Mike Murray, vice president of security intelligence at Lookout, talks with Threatpost’s Tom Spring to discuss the latest trends in mobile advanced persistence threats APTs. He said mobile is redefining traditional inbox phishing. On smartphones, phishing includes dangerous links insid...

Phishing Spy Campaign Targets Top Mideast Officials

Researchers have discovered a phishing campaign that infected Android devices with custom surveillance-ware bent on extracting data from top officials, primarily in the Middle East. Researchers at Lookout Security told Threatpost that the tool, dubbed Stealth Mango, has been used to collect over ...

lk.mango-office.ru XSS vulnerability

Open Bug Bounty ID: OBB-598219 Description| Value ---|--- Affected Website:| lk.mango-office.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial of Service Vulnerability in Mango TV Client Handling AVIs

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcast of all Hunan TV programs and providing users with all kinds of popular movies, TV dramas, variety shows, animation, music, entertainment and other content. A deni...

Memory corruption vulnerability in Mango TV client (CNVD-2017-35526)

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

Memory corruption vulnerability in Mango TV client (CNVD-2017-35528)

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

Memory Corruption Vulnerability in Mango TV Client

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

Memory corruption vulnerability in Mango TV client (CNVD-2017-35527)

Mango TV is the only Internet video platform under Hunan Radio and Television, exclusively providing HD video live on-demand broadcasting of all Hunan TV programs, as well as supporting the playback of a variety of local videos. A memory corruption vulnerability exists in the MangoTV client when...

mango-office.com Open Redirect vulnerability

On the 13.10.2017 security researcher reported a Open Redirect vulnerability affecting the mango-office.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 13...

Infinite Automation Mango Automation Command Injection

require 'msf/core' class MetasploitModule 'Infinite Automation Mango Automation Command Injection', 'Description' = %q This module exploits a command injection vulnerability found in Infinite Automation Systems Mango Automation v2.5.0 - 2.6.0 beta builds prior to 430. , 'Author' = 'james fitts' ,...

Infinite Automation / Mango Automation - Command Injection Exploit

Exploit for jsp platform in category remote exploits require 'msf/core' class MetasploitModule 'Infinite Automation Mango Automation Command Injection', 'Description' = %q This module exploits a command injection vulnerability found in Infinite Automation Systems Mango Automation v2.5.0 - 2.6.0...

Infinite Automation Mango Automation - Command Injection (Metasploit)

Infinite Automation Mango Automation - Command Injection Metasploit...

Infinite Automation Mango Automation - Command Injection (Metasploit)

require 'msf/core' class MetasploitModule 'Infinite Automation Mango Automation Command Injection', 'Description' = %q This module exploits a command injection vulnerability found in Infinite Automation Systems Mango Automation v2.5.0 - 2.6.0 beta builds prior to 430. , 'Author' = 'james fitts' ,...

ScadaBR Credentials Dumper Exploit

This module retrieves credentials from ScadaBR, including service credentials and unsalted SHA1 password hashes for all users, by invoking the 'EmportDwr.createExportData' DWR method of Mango M2M which is exposed to all authenticated users regardless of privilege level. This module has been teste...

ScadaBR Credentials Dumper

This module retrieves credentials from ScadaBR, including service credentials and unsalted SHA1 password hashes for all users, by invoking the EmportDwr.createExportData DWR method of Mango M2M which is exposed to all authenticated users regardless of privilege level. This module has been tested...

Mango Recharge Free Recharge - External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Mango Recharge Free Recharge published at the 'play' market has multiple vulnerabilities...

Mango Signs - Digital Signage - WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Mango Signs - Digital Signage published at the 'play' market has multiple vulnerabilities...

MANGO - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MANGO published at the 'play' market has multiple vulnerabilities...