EC 2016 Match schedule - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application EC 2016 Match schedule published at the 'play' market has multiple vulnerabilities...

TimeTune Schedule Planner - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TimeTune Schedule Planner published at the 'play' market has multiple vulnerabilities...

Doodle: Schedule Maker - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Doodle: Schedule Maker published at the 'play' market has multiple vulnerabilities...

Bible Reading Schedule - Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Bible Reading Schedule published at the 'play' market has multiple vulnerabilities...

My shift schedule - team TRIAL - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application My shift schedule - team TRIAL published at the 'play' market has multiple vulnerabilities...

Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...

OpenSSL updates, 1.0.2g and 1.0.1s

OpenSSL updates, 1.0.2g and 1.0.1s Updates to this post, including a schedule change are included below The OpenSSL project has announced that they will be releasing versions 1.0.2g and 1.0.1s this week, on Tuesday the 1st of March, UTC. The releases will fix "several defects" that are labelled a...

December Security Release Schedule Update

December Security Release Schedule Update The OpenSSL project announced today that they will be releasing security updates for versions 1.0.2, 1.0.1, 1.0.0 and 0.9.8 on the 3rd of December UTC. The updates will fix a number of security defects, the highest of which is classified as "moderate"...

BlueHat v15 Announces Schedule and Registration

As we inch closer to the 15th BlueHat Security Conference, we are happy to announce the lineup of speakers and topics for this event. This year will continue with a solid speaker and topic selection that engage engineers, executives, and invited guests to discuss and tackle some of the hardest...

Threat Outbreak Alert RuleID18397: Email Messages Distributing Malicious Software on October 2, 2015

Medium Alert ID: 41311 First Published: 2015 October 1 15:10 GMT Last Updated: 2015 October 5 13:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18397 an...

schedule.yale.edu XSS vulnerability

Vulnerable URL: http://schedule.yale.edu/processscheduler.php?mode=cal=457=%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E====1442831612488 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:|...

tvschedule.zap2it.com XSS vulnerability

Open Bug Bounty ID: OBB-84522 Description| Value ---|--- Affected Website:| tvschedule.zap2it.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Threat Outbreak Alert RuleID16555: Email Messages Distributing Malicious Software on July 9, 2015

Medium Alert ID: 39844 First Published: 2015 July 10 13:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16555 may contain the following files: Name | Siz...

Patch Management: Patch Schedule From Red Hat Satellite Server

Binary data satellitegetschedule.nbin...

i.FTP 'schedule.xml' handles buffer overflow vulnerabilities

Ftp is an i.Ftp client. A buffer overflow vulnerability exists in i.Ftp. When placing the Schedule.xml file in C:\Program Files\Memecode\i.Ftp, user-supplied input is not properly validated, allowing an attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...

i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

i.FTP 2.21 - Time Field (SEH)

i.FTP 2.21 - Time Field SEH !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software...

i.FTP 2.21 - Time Field SEH Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

Novell ZENworks 'ScheduleQuery' Method SQL Injection Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. A SQL injection vulnerability in the 'ScheduleQuery' method of the schedule class in Novell ZENworks allows remote attackers to submit specially...