Pic Frames - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pic Frames published at the 'play' market has multiple vulnerabilities...

Square Blur: No crop insta pic - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Square Blur: No crop insta pic published at the 'play' market has multiple vulnerabilities...

Insta square size pic grid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Insta square size pic grid published at the 'play' market has multiple vulnerabilities...

cameran collage-pic photo edit - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application cameran collage-pic photo edit published at the 'play' market has multiple vulnerabilities...

Pic Stitch - #1 Collage Maker - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Pic Stitch - 1 Collage Maker published at the 'play' market has multiple vulnerabilities...

Pic Collage - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Pic Collage published at the 'play' market has multiple vulnerabilities...

Pic Lock- Hide Photos & Videos - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pic Lock- Hide Photos & Videos published at the 'play' market has multiple vulnerabilities...

Alternate Pic View 2.150 - '.pgm' Crash (PoC)

Exploit for windows platform in category dos / poc Exploit Title: Alternate Pic View 2.150 PGM CRASH POC Date: 14-02-2016 Exploit Author: Shantanu Khandelwal Vendor Homepage: http://www.alternate-tools.com Software Link: http://www.alternate-tools.com/pages/cpicview.php?lang=ENG Version: 2.150...

Alternate Pic View 2.150 - .pgm Crash (PoC)

Alternate Pic View 2.150 - .pgm Crash PoC Exploit Title: Alternate Pic View 2.150 PGM CRASH POC Date: 14-02-2016 Exploit Author: Shantanu Khandelwal Vendor Homepage: http://www.alternate-tools.com Software Link: http://www.alternate-tools.com/pages/cpicview.php?lang=ENG Version: 2.150 Tested on:...

Alternate Pic View 2.150 - '.pgm' Crash (PoC)

Exploit Title: Alternate Pic View 2.150 PGM CRASH POC Date: 14-02-2016 Exploit Author: Shantanu Khandelwal Vendor Homepage: http://www.alternate-tools.com Software Link: http://www.alternate-tools.com/pages/cpicview.php?lang=ENG Version: 2.150 Tested on: Windows XP Sp3,Windows 7 CVE : unknown at...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libnewt-pic package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

X (Formerly Twitter): Profile Pic padding (Length-hiding) fails due to use of GZIP

Back in August, I noted that Twitter was appending anywhere from dozens to thousands of junk 0x20 bytes on the end of the JPEG and PNG files they serve for users’ profile images. It was suggested that, though invalid, they were doing this deliberately, as an information-hiding mechanism. The HTTP...

CVE-2014-6663

The Addis Gag Funny Amharic Pic aka com.wAmharicFunnyPicture application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6663

The CVE-2014-6663 entry concerns the Android app “The Addis Gag Funny Amharic Pic” (com.wAmharicFunnyPicture) v0.1, which does not verify X.509 certificates from SSL servers. This root cause enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via crafted certific...

[SECURITY] Fedora 19 Update: sdcc-3.3.0-1.fc19

SDCC is a C compiler for 8051 class and similar microcontrollers. The package includes the compiler, assemblers and linkers, a device simulator and a core library. The processors supported to a varying degree include the 8051, ds390, z80, hc08, and PIC...

Debian: Security Advisory (DSA-2985-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU groff 1.1x xploitation Via LPD Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3103/info lpd is the print spooling daemon. It is used to support network printing on a variety of unix platforms. The version of lpd that ships with linux systems invokes groff to process documents that are to be printed...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...