ASUS RT-N10 CSRF / Code Execution / XSS / Open Redirection

Hello list! There are multiple vulnerabilities in ASUS Wireless Router RT-N10. There are Code Execution, Cross-Site Scripting and URL Redirector Abuse vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are the next models: ASUS RT-N10, RT-N10E,...

FBI Arrests Two Hackers Who Hacked US Spy Chief, FBI and CIA Director

US authorities have arrested two North Carolina men on charges that they were part of the notorious hacking group "Crackas With Attitude." Crackas with Attitude is the group of hackers who allegedly was behind a series of audacious and embarrassing hacks that targeted personal email accounts of...

Read-only share recipient can restore old versions of file (NC-SA-2016-005)

The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions...

Unspecified Vulnerability in Apache TomEE

Apache TomEE is the United States Apache Apache Software Foundation developed a Java EE server. A security vulnerability exists in Apache TomEE versions prior to 7.0.0-M3 and version 1.7.4, no details of the vulnerability are available at this time...

'Dropping Elephant' APT Attackers Targets Old Windows Flaws

Don’t judge an APT by its exploits alone. That’s the takeaway from a report that details a unique advanced persistent threat that leverages a kludge of unsophisticated, outdated and rudimentary attack tools to conduct cyber espionage. The target of the attacks are government and diplomatic agenci...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to escalate their privileges.

The Zyxel ZyWALL USG 300 network firewall/routing system has a bug during the default password change process. As a result, the Quagga and Zebra processes continue to respond to requests made with the old password...

FantasyTote: Insecure password change mechanism may lead to full account takeover

Description: The password change mechanism which is located at https://www.fantasytote.com/users/edit is insecure as there is no old password field deployed in it. Any unauthorized user can access the account and can change the password directly without knowing the old password. The current...

WordPress OPS Old Post Spinner 插件任意文件包含漏洞

No description provided by source...

SUSE-SU-2016:1457-1 Security update for cyrus-imapd

Previous versions of cyrus-imapd would not allow its users to disable old protocols like SSLv1 and SSLv2 that are unsafe due to various known attacks like BEAST and POODLE. https://bugzilla.cyrusimap.org/showbug.cgi?id=3867 remedies this issue by adding the configuration option 'tlsversions' to...

Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal

Overview kml2jsonp.php contained in source code of OldGSIMaps prior to January, 2015 provided by the Geospatial Information Authority of Japan GSI contains a directory traversal vulnerability CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

mediawiki -- multiple vulnerabilities

Mediawiki reports: Security fixes: T122056: Old tokens are remaining valid within a new session T127114: Login throttle can be tricked using non-canonicalized usernames T123653: Cross-domain policy regexp is too narrow T123071: Incorrectly identifying http link in a's href attributes, due to m...

Microsoft Security Intelligence Report: Top Takeaways

Microsoft’s Security Intelligence Report painted a bleak picture when it comes to malware, fraudulent login attempts and the staying power of really old exploits. Key findings in the 198-page biannual report run the gamut illustrating how old threats die hard and what new threats are on the...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-02445)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions of Google Chrome prior to 50.0.2661.75. A remote attacker can exploit the vulnerability to execute arbitrary code...

PT-2020-12508 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to a stream out-of-bounds seek in the update read synchronize function, which could lead to a later out-of-bounds read. Recommendations: For FreeRDP versions 1.0 through...

Old MacDonald Pet Farm - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Old MacDonald Pet Farm published at the 'play' market has multiple vulnerabilities...

E30 Old Car Parking - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application E30 Old Car Parking published at the 'play' market has multiple vulnerabilities...

Old Vegas Slots - Free Casino - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Old Vegas Slots - Free Casino published at the 'play' market has multiple vulnerabilities...

Old House - Escape - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Old House - Escape published at the 'play' market has multiple vulnerabilities...

Make me Old - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Make me Old published at the 'play' market has multiple vulnerabilities...

The Old Republic™ Security Key - External URLs, Suspicious files, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application The Old Republic™ Security Key published at the 'play' market has multiple vulnerabilities...