Route Validation Bypass

Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...

Pornhub: XSS ReflectedGET /*embed_player*?

The researcher discovered a reflected XSS in the embedplayer route...

Voyager: Route Planner - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Voyager: Route Planner published at the 'play' market has multiple vulnerabilities...

GPS Route Finder Maps - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder Maps published at the 'play' market has multiple vulnerabilities...

Map and Route - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Map and Route published at the 'play' market has multiple vulnerabilities...

GPS Driving Route - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Driving Route published at the 'play' market has multiple vulnerabilities...

Driving Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Driving Route Finder published at the 'play' market has multiple vulnerabilities...

ROUTE 66 Navigate - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ROUTE 66 Navigate published at the 'play' market has multiple vulnerabilities...

Falk Maps & Route Planner - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Falk Maps & Route Planner published at the 'play' market has multiple vulnerabilities...

Munich Metro MVG Map & Route - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Munich Metro MVG Map & Route published at the 'play' market has multiple vulnerabilities...

Sales Rep Route Planner - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sales Rep Route Planner published at the 'play' market has multiple vulnerabilities...

GPS Route Finder - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...

GPS Route Finder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GPS Route Finder published at the 'play' market has multiple vulnerabilities...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot by sending an IPv4 ICMP packet with the IP Record Route option...

DEBIAN-CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

UBUNTU-CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

Code injection

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...