4744 matches found
Auto Clicker - Runtime privilege escalation, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Auto Clicker published at the 'play' market has multiple vulnerabilities...
Moldiv - Collage Photo Editor - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application Moldiv - Collage Photo Editor published at the 'play' market has multiple vulnerabilities...
Vesti - news, photo and video - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Vesti - news, photo and video published at the 'play' market has multiple vulnerabilities...
Antoine Soundboard - FREE - Customized SSL, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Antoine Soundboard - FREE published at the 'play' market has multiple vulnerabilities...
My shift schedule - team TRIAL - SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application My shift schedule - team TRIAL published at the 'play' market has multiple vulnerabilities...
Understanding and Configuring EPA Verbose Logging on Citrix Gateway
CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...
Advanced Malware targeting Internet of the Things and Routers
Anything connected to the Internet could be hacked and so is the Internet of Things IoTs. The market fragmentation of IoTs or Internet-connected devices is a security nightmare, due to poor security measures implemented by their vendors. Now, the researchers at security firm ESET have discovered ...
Spotify Music Streaming Detection via RTMP
Binary data 9156.prm...
Cross-Site Scripting Scanning Attempt (CVE-2015-4661; CVE-2019-16385; CVE-2019-9167; CVE-2020-10946; CVE-2020-12261; CVE-2020-13228; CVE-2020-13627; CVE-2020-13628; CVE-2020-14953; CVE-2021-21801; CVE-2021-25080; CVE-2022-25305; CVE-2022-28102)
Remote attackers use Cross-Site Scripting scanning in order to locate potential Cross-Site Scripting vulnerabilities on a target server, which could be later used for attacks...
Lynis 2.2.0 - Security Auditing Tool for Unix/Linux Systems
Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...
Ruby-Nmap - A Rubyful interface to the Nmap exploration tool and security / port scanner
A Ruby interface to nmap , the exploration tool and security / port scanner. Features Provides a Ruby interface for running nmap. Provides a Parser for enumerating nmap XML scan files. Examples Run Nmap from Ruby: require 'nmap/program' Nmap::Program.scan do |nmap| nmap.synscan = true...
ZMap Security Scanner over HTTP
A vulnerability scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the ZMap security scanner to detect vulnerabilities on a target server...
PHP Proxy Server Scanning Attempt
Remote attackers can send HTTP requests as a method of scanning for the existence of specific proxy servers with known vulnerabilities, in order to later exploit these vulnerabilities to compromise the server's security...
Multiple Routers Rom-0 Scanning Attempt
A vulnerability scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the Rom-0 vulnerability to get user credentials and other sensitive information...
shodan-api NSE Script
Queries Shodan API for given targets and produces similar output to a -sV nmap scan. The ShodanAPI key can be set with the 'apikey' script argument, or hardcoded in the .nse file itself. You can get a free key from N.B if you want this script to run completely passively make sure to include the -...
New Relic: Server Side Browsing - localhost open port enumeration
Hi again to all, I've found that is possible to scan all the open ports and network information of internal instances of your amazon DC that are related with synthetics monitors. NOTE: I do not have a pro account so I can use the more advanced synthetics functions or the Insights db query to get...
Monkey race ray! RSA conference badge scanning application broke vulnerability-vulnerability warning-the black bar safety net
Recently, the BLUE BOX company's security researchers found: RSA 2 0 1 6 The General Assembly on the use of badge scanning APP there is a hard-coded default passwords. This year, RSA 2 0 1 6 The participants will get a unique surprise: the General Assembly, as many manufacturers offer a Samsung...
How To Keep Your Android Phone Secure
As the number of threats is on the rise, Android platform is no longer safe, which isn't a surprise to anyone. Most of us are usually worried more about the security of our desktops or laptops and forget to think about the consequences our smartphones can make if compromised or stolen. Unlike...
How Often Should You Scan Websites and Web Applications for Vulnerabilities?
Web Applications and Websites Exist in a Dynamic Environment There is no questioning the fact that the web application security landscape is in a constant state of flux. The pace of change is not only rapid but resembles a constant game of cat and mouse between hackers and security professionals...