Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

RHEL 6 : kernel-rt (RHSA-2017:0113)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0113 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 7 : kernel-rt (RHSA-2017:0091)

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

MC Real Estate Pro Script - Improper Access Restrictions Vulnerability

Exploit for php platform in category web applications Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: İhsan Şencan Author Web:...

MC Real Estate Pro Script - Improper Access Restrictions

Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet Direc...

MC Real Estate Pro Script - Improper Access Restrictions

MC Real Estate Pro Script - Improper Access Restrictions Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: İhsan Şencan Author We...

MC Real Estate Pro Insecure Direct Object Reference

Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Real Estate Pro Script Buy Now: http://microcode.ws/product/mc-real-estate-pro-php-script/3858 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Open Source Real-Estate Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Admin Login Bypass Date: 13.01.2017 Vendor Homepage: http://phprealestatescript.org/ Script Name: Open Source Real-Estate Script Script Buy Now: http://phprealestatescript.org/open-source-real-estate-script.html...

Transit: Real-Time Transit App - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Transit: Real-Time Transit App published at the 'play' market has multiple vulnerabilities...

Open Source Real-Estate Script - SQL Injection

Open Source Real-Estate Script - SQL Injection Vulnerability: SQL Injection + Admin Login Bypass Date: 13.01.2017 Vendor Homepage: http://phprealestatescript.org/ Script Name: Open Source Real-Estate Script Script Buy Now: http://phprealestatescript.org/open-source-real-estate-script.html Author:...

Open Source Real-Estate Script - SQL Injection

Vulnerability: SQL Injection + Admin Login Bypass Date: 13.01.2017 Vendor Homepage: http://phprealestatescript.org/ Script Name: Open Source Real-Estate Script Script Buy Now: http://phprealestatescript.org/open-source-real-estate-script.html Author: İhsan Şencan Author Web: http://ihsan.net Mail...

Real Time Network Monitoring: Cyberprobe

Real Time Network Monitoring Cyberprobe is a distrbuted architecture for real-time monitoring of networks against attack. The software consists of a number of components, including: a probe, which collects data packets and forwards it over a network in standard streaming protocols. a monitor, whi...

Firejail - Local Privilege Escalation

Firejail - Local Privilege Escalation firejail advisory for TOCTOU in --get and --put local root Releasing a brief advisory/writeup about a local root privesc found in firejail that we reported back in Nov, 2016. This is in response to a recent thread on oss-sec where people seem interested in...

Shopify: apps.shopify.com - CSRF token leakage through Google Analytics

Description: When a user tries to send a support a message to an app developer in apps.shopify.com , he will be asked to login and once he is logged in , he will be redirected to apps.shopify.com/appid?authenticitytoken=currentuserauthenticitytoken. Developers can track their app page view in...

Real Followers and Likes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Followers and Likes published at the 'play' market has multiple vulnerabilities...

Real Fast Followers - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Fast Followers published at the 'play' market has multiple vulnerabilities...

Joomla RPL 8.9.2 SQL Injection

xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Joomla comrpl SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comrpl Vendor Homepage : https://www.realtyna.com version : ALL Tested on: BACKBOX MyBlog : http://xbadgirl21.blogspot.com/...

Joomla com_rpl SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comrpl SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comrpl Vendor Homepage : https://www.realtyna.com version : ALL Tested on: BACKBOX MyBlog : http://xbadgirl21.blogspot.com/ Dat...

Fast Breakfast App Has Design Flaws

Fast Breakfast APP is a mobile service software. Fast Breakfast APP has a design vulnerability. It allows attackers to exploit the vulnerability to modify any user's real-name authentication information...