Directory traversal

ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/core/languages/languageimport.php aka Import New Language or mods/standard/patcher/indexadmin.php aka Patcher component...

CVE-2019-12170: Unrestricted Upload of File with Dangerous Type

ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/core/backups/upload.php aka backup component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PH...

PT-2019-10255

Name of the Vulnerable Software and Affected Versions: Call of Duty: Modern Warfare 2 versions prior to 2015-08-11 Call of Duty: Modern Warfare 3 versions prior to 2015-08-11 Call of Duty: Ghosts versions prior to 2015-08-11 Call of Duty: Advanced Warfare versions prior to 2015-08-11 Call of Duty...

RHEL 7 : openvswitch (RHSA-2018:3500)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3500 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

[SECURITY] Fedora 28 Update: ghc-hs-bibutils-6.6.0.0-1.fc28

Haskell bindings to Chris Putnam's bibutils, a library that converts between various bibliography formats using a common MODS-format XML intermediate...

[SECURITY] Fedora 28 Update: bibutils-6.6-1.fc28

The bibutils package converts between various bibliography formats using a common MODS-format XML intermediate...

Sony Playstation 4 (PS4) 5.07 - Jailbreak WebKit bpf v2 Kernel Loader

Sony Playstation 4 PS4 5.07 - Jailbreak WebKit bpf v2 Kernel Loader PS4 5.05 Kernel Exploit --- Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking an...

50,000 Minecraft users infected with hard drive wiping malware

By Waqas Here is why you should avoid downloading mods and skins This is a post from HackRead.com Read the original post: 50,000 Minecraft users infected with hard drive wiping malware...

gamer-mods.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-561779 Description| Value ---|--- Affected Website:| gamer-mods.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Kernel Exploit for Sony PS4 Firmware 4.05 Released, Jailbreak Coming Soon

Wishing you all a very 'belated' Merry Christmas. This holiday season Santa has a very special gift for all PlayStation gamers. Developer SpecterDev finally released a fully-functional much-awaited kernel exploit for PlayStation 4 firmware 4.05 today—almost two months after Team Fail0verflow...

Farming simulator 15 mods - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Farming simulator 15 mods published at the 'play' market has multiple vulnerabilities...

Guide For Weapon Mods - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Guide For Weapon Mods published at the 'play' market has multiple vulnerabilities...

Furniture MODS MCPE GUIDE - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Furniture MODS MCPE GUIDE published at the 'play' market has multiple vulnerabilities...

Monster MODS MCPE - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Monster MODS MCPE published at the 'play' market has multiple vulnerabilities...

TNT MODS MCPE GUIDE - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application TNT MODS MCPE GUIDE published at the 'play' market has multiple vulnerabilities...

GUN MODS FOR MCPE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GUN MODS FOR MCPE published at the 'play' market has multiple vulnerabilities...

Gun Mods - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Gun Mods published at the 'play' market has multiple vulnerabilities...

CVE-2015-7712

ATutor 2.2 and earlier contains a PHP code injection vulnerability in mods/_standard/gradebook/edit_marks.php that allows remote authenticated users with AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the asc or desc parameters. This is a classic eval/ injection flaw in the gradebo...

CVE-2015-7712: Undefined Security Weakness

Multiple eval injection vulnerabilities in mods/standard/gradebook/editmarks.php in ATutor 2.2 and earlier allow remote authenticated users with the ATPRIVGRADEBOOK privilege to execute arbitrary PHP code via the 1 asc or 2 desc parameter...

CVE-2014-9752: Undefined Security Weakness

Unrestricted file upload vulnerability in mods/core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the...