Oracle MySQL Server <= 5.5.39 / 5.6 <= 5.6.20 Security Update (cpuoct2014) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Nexus and Cisco Multilayer Director Switches MOTD Telnet Login Reset Vulnerability (Cisco-SA-20150610-CVE-2015-0775)

A vulnerability in the Message of the Day MOTD or banner functionality of the NX-OS Software could allow an unauthenticated, remote attacker to cause the login process to reset. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Oracle: Security Advisory (ELSA-2016-0715)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-2413

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

CKEditor Detection (HTTP)

HTTP based detection of CKEditor. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111094";...

リア充はじめました（仮）〜既読or放置！無料恋愛SNSゲーム - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application リア充はじめました（仮）〜既読or放置！無料恋愛SNSゲーム published at the 'play' market has multiple vulnerabilities...

Roald Dahl's Twit or Miss - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Roald Dahl's Twit or Miss published at the 'play' market has multiple vulnerabilities...

YES or kNOw smartPLAY - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application YES or kNOw smartPLAY published at the 'play' market has multiple vulnerabilities...

Hot or Not - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Hot or Not published at the 'play' market has multiple vulnerabilities...

Truth or Dare - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Truth or Dare published at the 'play' market has multiple vulnerabilities...

Truth or Dare Party - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Truth or Dare Party published at the 'play' market has multiple vulnerabilities...

HeizOel24 - Certificates or keys found, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HeizOel24 published at the 'play' market has multiple vulnerabilities...

Oracle: Security Advisory (ELSA-2016-0459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-0827

Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, related to EffectBundle.cpp and...

CVE-2016-0824

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591...

Oracle: Security Advisory (ELSA-2016-0302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-7408

The server in IBM Spectrum Protect aka Tivoli Storage Manager 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict use of the ASNODENAME option, which allows remote attackers to read or write to backup data by leveraging proxy authority...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-124)

The openSUSE 13.1 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075. - CVE-2015-7550: A local user could have...

WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery

WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery Exploit Title: Wordpress simple add pages or posts CSRF Vulnerability Date: 2016/29/01 Exploit Author: ALIREZAPROMIS Vendor Homepage: https://wordpress.org/plugins/simple-add-pages-or-posts/ Software Link:...

WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery

Exploit Title: Wordpress simple add pages or posts CSRF Vulnerability Date: 2016/29/01 Exploit Author: ALIREZAPROMIS Vendor Homepage: https://wordpress.org/plugins/simple-add-pages-or-posts/ Software Link: https://downloads.wordpress.org/plugin/simple-add-pages-or-posts.1.6.zip Version: 1.6 Teste...