CVE-2016-0267

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive cleartext secure-property information via 1 the server UI or 2 a database request...

Red Line Drawn: China Recalculates Its Use of Cyber Espionage

On Sept. 25, 2015, President Barack Obama and Chinese President Xi Jinping agreed that neither government would “conduct or knowingly support cyber-enabled theft of intellectual property” for an economic advantage. Some observers hailed the agreement as a game changer for U.S. and Chinese...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the ModuleSystem::RequireForJsInner function in the extensions/renderer/modulesystem.cc module is related to incorrect property handling. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions policies...

WordPress Realia 0.8.5 Cross Site Scripting

Exploit Title : wordpress plugin 'Realia' real estate solution multiple XSS Vulnerability Author : WICS Date : 03/06/2016 Software Link : https://wordpress.org/plugins/realia/ Tested Version: 0.8.5 Overview: Realia is wordpress plugin which provides functionality of real estate service like searc...

PHP Realestate Script Script 4.9.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0 Exploi...

Adobe Flash - Type Confusion in FileReference Constructor

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=799 There is a type confusion issue in the FileReference constructor. The constructor adds several properties to the constructed object before setting the type and data. If a watch...

file: incomplete fix for CVE-2012-1571 in cdf_read_property_info

It was found that the fix for CVE-2012-1571 was incomplete; the File Information fileinfo extension did not correctly parse certain Composite Document Format CDF files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file...

paragonproperty.com.au XSS vulnerability

Vulnerable URL: http://www.paragonproperty.com.au/wp-content/plugins/Realty/display/elements/formcontactagent.php?userid=%22%3C/script%3E%3Cscript%3Ealert%28/OPENBUGBOUNTY/%29%3C/script%3E%27=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

Old Android Flaw Elevates Privileges, Steals SMS, Call Logs

A five-year-old Android vulnerability disclosed today affects hundreds of different device models going back to Jelly Bean 4.3. Older devices are at the greatest risk; newer devices running Android with SE Android, the OS’ implementation of Security Enhanced Linux, are at a lesser risk. The...

Platinum APT Group Abuses Windows Hotpatching

An obscure Windows feature known as hotpatching, missing in the OS since the introduction of Windows 8, is a preferred tool used by a resourced attack group called Platinum that was uncovered by Microsoft. The group has carried out targeted attacks in South and Southeast Asia since at least 2009,...

Design/Logic Flaw

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

CVE-2015-8823

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

CVE-2015-8823

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code

The vulnerability of Firefox browsers is related to errors in the storage of properties of decompressed objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using specially crafted JavaScript variables...

MagicBricks Property Search - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MagicBricks Property Search published at the 'play' market has multiple vulnerabilities...

Xalan-Java: Arbitrary code execution

Background Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. Description The TransformerFactory in Apache Xalan-Java does not properly restrict access to certain properties when FEATURESECUREPROCESSING is enabled. This can also be exploit...

Immonet Property Search - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Immonet Property Search published at the 'play' market has multiple vulnerabilities...

Property Switzerland, Flat - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Property Switzerland, Flat published at the 'play' market has multiple vulnerabilities...

Arbitrary Code Execution Vulnerability in Multiple Adobe Products (CNVD-2016-01540)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Arbitrary Code Execution Vulnerability in Multiple Adobe Products (CNVD-2016-01539)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center to provid...