DEBIAN-CVE-2018-10871

389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker with sufficiently...

Happy anniversary to Dreamcast…and its scams

This month marks 20 years since the legendary SEGA Dreamcast console was first announced. Looked on fondly by gamers, it revolutionised many aspects of gaming and brought cheapish online console gaming to the masses. Click to enlarge SEGA has endured many, many calls for it to come back as...

retro-fm-30plus.de XSS vulnerability

Open Bug Bounty ID: OBB-591663 Description| Value ---|--- Affected Website:| retro-fm-30plus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hoopz.se XSS vulnerability

Open Bug Bounty ID: OBB-528240 Description| Value ---|--- Affected Website:| hoopz.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...

Mini Golf Stars: Retro Golf - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mini Golf Stars: Retro Golf published at the 'play' market has multiple vulnerabilities...

Dungeon & Pixel Hero(RetroRPG) - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dungeon & Pixel HeroRetroRPG published at the 'play' market has multiple vulnerabilities...

Retro King slot machine - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Retro King slot machine published at the 'play' market has multiple vulnerabilities...

Real Retro Games - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Retro Games published at the 'play' market has multiple vulnerabilities...

Snake '97: retro phone classic - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Snake '97: retro phone classic published at the 'play' market has multiple vulnerabilities...

Vintage Retro Camera + VHS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Vintage Retro Camera + VHS published at the 'play' market has multiple vulnerabilities...

Retro Classic Ringtones - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Retro Classic Ringtones published at the 'play' market has multiple vulnerabilities...

retro-gaming.co XSS vulnerability

Vulnerable URL: http://www.retro-gaming.co/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:19 GMT Vulnerability type:| XSS...

MyBB (editpost.php, posthash) - SQL Injection Vulnerability

No description provided by source. MyBB 1.6.9 is vulnerable to Stored, Error based, SQL Injection. Vulnerable code: /editpost.php === Line 398 === $posthashquery = posthash='$posthash' OR ; === It can be done by using Tamper DataOr Live HTTP Headers, and when submitting a post, edit the 'posthash...

NSA RETRO Tool Collects Content of Phone Calls

The latest in the slow but steady trickle of leaks dripping out of NSA whistleblower Edward Snowden reportedly shows that the U.S. spying agency has the capacity to recall entire foreign phone call conversations for as long a month after the fact. The program, according to a Washington Post repor...

MyBB editpost.php SQL Injection

MyBB...

MyBB <1.6.9 (editpost.php, posthash) SQL Injection Vulnerability

Exploit for php platform in category web applications MyBB 1.6.9 is vulnerable to Stored, Error based, SQL Injection. Vulnerable code: /editpost.php === Line 398 === $posthashquery = "posthash='$posthash' OR "; === It can be done by using Tamper DataOr Live HTTP Headers, and when submitting a pos...

Computerviren - Arten, Verfahren, Technik & Geschichte

Document Title: =============== Computerviren - Arten, Verfahren, Technik & Geschichte References: =========== https://www.vulnerability-lab.com/resources/documents/194.pdf Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 194 Discovery...

Computerviren - Arten, Verfahren, Technik & Geschichte

Document Title: =============== Computerviren - Arten, Verfahren, Technik & Geschichte References: =========== http://www.vulnerability-lab.com/resources/documents/194.pdf Release Date: ============= 2011-07-17 Vulnerability Laboratory ID VL-ID: ==================================== 194 Discovery...

Chrome's Fail Folder

There’s something very retro about the “fail folder,” Google’s go-to image, which pops up on the Chrome Web browser every time you, say, lose your Internet connection. It’s colorless and two dimensional and its size and shape not so subtly recall the beloved GUI of early vintage Macs. Google made...

PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit ======================================================== 0day.today 2018-03-14...