rainbowcinemas.ca XSS vulnerability

Vulnerable URL: http://www.rainbowcinemas.ca/A/index.php?show==%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=PeaceRiver=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

rainbowholiday20150308.com XSS vulnerability

Vulnerable URL: http://www.rainbowholiday20150308.com/?s=%27;alert0//%27;alert1//%22;alert2//%22;alert+3//--%3E%3C/SCRIPT%3E%22%3E%27+%3E%3CSCRIPT%3Ealert/XSSPOSED/%3C/SCRIPT%3E=&%22;alert6+;function+xss// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...

Care Bears Rainbow Playtime - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears Rainbow Playtime published at the 'play' market has multiple vulnerabilities...

Rainbow Lines FREE - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Rainbow Lines FREE published at the 'play' market has multiple vulnerabilities...

Rainbow Rock Tiles Guitar Tabs - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rainbow Rock Tiles Guitar Tabs published at the 'play' market has multiple vulnerabilities...

Rainbow Love Emoji Keyboard - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Rainbow Love Emoji Keyboard published at the 'play' market has multiple vulnerabilities...

Rainbow Emoji Ikeyboard Theme - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Rainbow Emoji Ikeyboard Theme published at the 'play' market has multiple vulnerabilities...

rainbow.com.my IFRAME Injection vulnerability

Vulnerable URL: http://www.rainbow.com.my/support.php?id=1=%27%22%3E%3Ciframe%20src=https://xssposed.org%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:00 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclose...

rainbowhillsschool.net XSS vulnerability

Vulnerable URL: http://www.rainbowhillsschool.net/search.php?pageID=search=%3Cscript+src%3Dhttps%3A%2F%2Fxssposed.org%2F1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Distributed Password Cracking: CrackLord

Over the past several years the world of password cracking has exploded with new tools and techniques. These new techniques have made it easier than ever to reverse captured password hashes. With the addition of powerful techniques, from GPGPU cracking to rainbow tables, it is easier than ever to...

Netop Remote Control 11.52 / 12.11 Credential Issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-025 Product: Netop Remote Control Vendor: Netop Affected Versions: 11.52, 12.11 Tested Versions: 11.52, 12.11 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-321 Insufficiently Protected Credentials CWE-522 Risk...

McAfee EEFF / FRP Predictable Salt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2014-008 Products: McAfee Endpoint Encryption for Files and Folders EEFF McAfee File and Removable Media Protection FRP Vendor: McAfee, Inc. Affected Versions: EEFF 3.2.x, 4.0.x, 4.1.x, 4.2.x; FRP 4.3.0.x Tested Versions: 4.2.0.164...

EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability

No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: Powered by EQdkp Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...

[Salted Hash Kracker v1.5] Recover the Password from Salted Hash text

Salted Hash Kracker is the free all-in-one tool to recover the Password from Salted Hash text. These days most websites and applications use salt based hash generation to prevent it from being cracked easily using precomputed hash tables such as Rainbow Crack. In such cases, 'Salted Hash Kracker'...

Microsoft SQL Server SQLi NTLM Stealer

This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the SQL injection from GETPATH to connect to the target SQL Server instance and execute the native "xpdirtree" or stored procedure. The stored...

Microsoft SQL Server NTLM Stealer

This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the supplied credentials to connect to the target SQL Server instance and execute the native "xpdirtree" or "xpfileexist" stored procedure. The stored...

Code injection

AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a 1 brute-force attack or 2 rainbow-table attack...

CVE-2012-3886

AirDroid 1.0.4 beta is affected by a cryptography weakness where MD5 is used for data in the checklogin parameter and the 7bb cookie. This allows an attacker on the same LAN to potentially recover sensitive data (cleartext) via sniffing the local wireless network and performing brute-force or rai...

CVE-2012-3886

AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attackers to obtain cleartext data by sniffing the local wireless network and then conducting a 1 brute-force attack or 2 rainbow-table attack...

Hacker going to demonstrate open source tool to crack Hashes with speed of 154 Billion/sec

Bitweasil lead developer going to Demonstrate an open source Tool called "Cryptohaze" at DEF CON 20. The Cryptohaze Multiforcer supports CUDA, OpenCL, and CPU code SSE, AVX, etc. All of this is aimed at either the pentester who can't spray hashes to the internet, or the hacker who would rather no...