405 matches found
VR Roller Coaster - External URLs, Native code usage, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application VR Roller Coaster published at the 'play' market has multiple vulnerabilities...
Roller Coaster Extreme HD - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Roller Coaster Extreme HD published at the 'play' market has multiple vulnerabilities...
File Roller v3.4.1 - DoS PoC
Exploit for linux platform in category dos / poc !/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux...
File Roller 3.4.1 Denial Of Service
!/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux ------------------------------------------------------------------------- Create ...
File Roller v3.4.1 - Denial of Service (PoC)
File Roller v3.4.1 - Denial of Service PoC !/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux...
File Roller v3.4.1 - Denial of Service (PoC)
!/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux ------------------------------------------------------------------------- Create ...
CVE-2014-7802
The Top Roller Coasters Europe 2 aka com.appaapps.top10tallesteuropeanrollercoasters2 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7802
The CVE-2014-7802 entry concerns the Top Roller Coasters Europe 2 Android app (com.appaapps.top10tallesteuropeanrollercoasters2). The vulnerability is due to the app not validating X.509 certificates from SSL servers, which allows MITM attackers to spoof servers and obtain sensitive information v...
CVE-2014-7087
The Top Roller Coasters Europe 1 aka com.appaapps.top10tallesteuropeanrollercoasters1 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7087
The CVE refers to the Android app Top Roller Coasters Europe 1 (com.appaapps.top10tallesteuropeanrollercoasters1). It suffers from not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...
Apache Roller OGNL Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
openSUSE Security Update : file-roller (openSUSE-SU-2013:1281-1)
The GNOME file-roller archive tool was updated to fix a path traversal issue while unpacking CVE-2013-4668. File Roller now sanitizes path names while unpacking, so that a path traversal attack cannot be used to create files outside the unpack destination directory. %NASLMINLEVEL 70300 C Tenable...
Apache Roller RCE Linux
Apache Roller RCE with Java-based template engine Velocity Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Apache Roller 5.0.2 代码执行漏洞
No description provided by source...
Apache Roller OGNL Injection Remote Code Execution (CVE-2013-4212)
A command execution vulnerability exists in Apache Roller due to a lack of sanitization on OGNL expressions passed to certain methods. This can lead to OGNL injection which can result in remote code execution. A remote unauthenticated attacker could exploit this vulnerability by sending crafted...
Apache Roller OGNL Injection
This module exploits an OGNL injection vulnerability in Apache Roller 5.0.2. The vulnerability is due to an OGNL injection on the UIAction controller because of an insecure usage of the ActionSupport.getText method. Vulnerability Type: Remote Command Execution For the exploit source code contact...
CVE-2013-4171
Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the search results in the 1 RSS and 2 Atom feed templates...
CVE-2013-4212
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subcla...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the search results in the 1 RSS and 2 Atom feed templates...
