Windows Gather DynaZIP Saved Password Extraction

This module extracts clear text credentials from dynazip.log. The log file contains passwords used to encrypt compressed zip files in Microsoft Plus! 98 and Windows Me. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

Mercedes me - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mercedes me published at the 'play' market has multiple vulnerabilities...

Text Me - Free Texting & Calls - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Text Me - Free Texting & Calls published at the 'play' market has multiple vulnerabilities...

Stop Call Me - Call Blocker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stop Call Me - Call Blocker published at the 'play' market has multiple vulnerabilities...

emaarme.com.sa XSS vulnerability

Vulnerable URL: http://www.emaarme.com.sa/english/news1.php?id=40-local'" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2481815 VIP website status:| No...

bossmp3.me XSS vulnerability

Open Bug Bounty ID: OBB-199043 Description| Value ---|--- Affected Website:| bossmp3.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Copy-Me 1.0.0 Cross Site Request Forgery

Details ================ Software: copy-me Version: 1.0.0 Homepage: http://wordpress.org/plugins/copy-me/ Advisory report: https://security.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/ CVE: Awaiting assignment CVSS: 4.3 Medium;...

WordPress Copy Me Plugin <= 1.0.0 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WordPress Copy Me Plugin <= 1.0.0 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

ft86.me XSS vulnerability

Vulnerable URL: http://ft86.me/86pic.php?name=1322804491-1.jpg" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4369244 VIP website status:| No Check ft86.me SSL connection:| Grade:...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

Important: Red Hat Security Advisory: Red Hat JBoss A-MQ 6.3 security update

Red Hat JBoss A-MQ 6.3, which fixes multiple security issues and includes several bug fixes and enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Wickr Me - Secure Messenger - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Wickr Me - Secure Messenger published at the 'play' market has multiple vulnerabilities...

OPAC KpwinSQL - SQL Injection

OPAC KpwinSQL - SQL Injection @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html Product Version - / All...

DEBIAN-CVE-2016-4437

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter...

CVE-2016-4437

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter...

UBUNTU-CVE-2016-4437

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter...

CVE-2016-4437

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter...

Apache Shiro Information Disclosure Vulnerability

Apache Shiro is the United States Apache Apache Software Foundation for the implementation of authentication , authorization , encryption and session management of the Java security framework . An information disclosure vulnerability exists in Apache Shiro versions 1.0.0 through 1.2.4, which stem...