MR Group - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MR Group published at the 'play' market has multiple vulnerabilities...

mr-johal.com XSS vulnerability

Vulnerable URL: http://mr-johal.com/search.php?q='" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1139 VIP website status:| Yes Check mr-johal.com SSL...

Hacker reports Vulnerability in Mr. Robot Season 2 Website

Mr. Robot was the biggest 'Hacking Drama' television show of 2015 and its second season will return to American TV screens on Wednesday 13th of July 2016. However, the new promotional website for season two of Mr. Robot has recently patched a security flaw that could have easily allowed a hacker ...

Mr Men: Mishaps & Mayhem Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mr Men: Mishaps & Mayhem Free published at the 'play' market has multiple vulnerabilities...

Mr. Know It All - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr. Know It All published at the 'play' market has multiple vulnerabilities...

Mr Bean™ - Flying Teddy - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr Bean™ - Flying Teddy published at the 'play' market has multiple vulnerabilities...

Mr-Bean Surf - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr-Bean Surf published at the 'play' market has multiple vulnerabilities...

MR Level Editor - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MR Level Editor published at the 'play' market has multiple vulnerabilities...

Sql injection

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml...

CVE-2015-6811

The CVE-2015-6811 entry describes a SQL injection in Sophos Cyberoam CR500iNG-XP firewall appliances running CyberoamOS 10.6.2 MR-1 and earlier. The vulnerability stems from inadequate filtering of the username parameter in login.xml, enabling remote attackers to execute arbitrary SQL commands. C...

Cisco UCS Central Software File Access Vulnerability

A vulnerability in the web framework of the Cisco UCS Central Software could allow an unauthenticated, remote attacker to download arbitrary files from a targeted device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

SET v6.5 - The Social-Engineer Toolkit “Mr Robot”

The Social-Engineer Toolkit SET was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. SET has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two...

CVE-2014-7993

Cisco Meraki HTTP Handler Local Information Disclosure vulnerability (CVE-2014-7993) affects Cisco Meraki MS, MR, and MX devices with firmware prior to 2014-09-24. An HTTP handler that does not require requests to originate from the Meraki cloud allows LAN-adjacent attackers to obtain sensitive c...

CVE-2014-7593

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7593

CVE-2014-7593 affects the Android app “The Mr Whippet – Yorkshire Ice” (aka com.appytimes.ice), version 1.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...

Information disclosure

The Mr.Sausage aka com.appmrsausage.layout application 1.301 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Buffer overflow

Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service crash via a long string in the URI in a GET request...

CVE-2014-4927

Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service crash via a long string in the URI in a GET request...

PT-2014-6212 · NetGear +2 · Netgear Mr-Adsl-Dg834 +4

Name of the Vulnerable Software and Affected Versions: ACME micro httpd versions affected versions not specified D-Link DSL2750U affected versions not specified D-Link DSL2740U affected versions not specified NetGear WGR614 affected versions not specified NetGear MR-ADSL-DG834 affected versions n...