American Fireworks Show - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application American Fireworks Show published at the 'play' market has multiple vulnerabilities...

TV Show Quizz - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TV Show Quizz published at the 'play' market has multiple vulnerabilities...

Hi Guess the TV Show: Pic Quiz - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hi Guess the TV Show: Pic Quiz published at the 'play' market has multiple vulnerabilities...

Horse Jump Show - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Horse Jump Show published at the 'play' market has multiple vulnerabilities...

Super Model Salon: Family Show - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Super Model Salon: Family Show published at the 'play' market has multiple vulnerabilities...

Mini Video Maker - Slide Show - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mini Video Maker - Slide Show published at the 'play' market has multiple vulnerabilities...

Fireworks VR Show on Cardboard - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks VR Show on Cardboard published at the 'play' market has multiple vulnerabilities...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - TechTalk Cairo TV

Document Title: =============== Interview Benjamin Kunz Mejri - TechTalk Cairo TV References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1692 Video: https://www.youtube.com/watch?v=QCOgmhVuQ6w Release Date: ============= 2016-01-22 Vulnerability Laboratory ID VL-ID:...

dgmcwhzf.com XSS vulnerability

Vulnerable URL: http://www.dgmcwhzf.com/ts/MailShow.asp?deptname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

edmontonfallhomeshow.com Open Redirect vulnerability

Vulnerable URL: http://www.edmontonfallhomeshow.com/Click.aspx?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 270330...

foreman: reports show/destroy not restricted by host authorization

A flaw was discovered where Satellite failed to properly enforce permissions on the show and delete actions for reports. An authenticated user with show or delete report permissions could use this flaw to view or delete any reports held in Foreman...

xpshop网店系统 xpshop.webui.Show SQL 注入

漏洞位置xpshop.webui.Show: private void GetImgstring pids ProductDB productDB = new ProductDB; DataTable thumbnailImg = productDB.GetThumbnailImgpids; thumbnailImg.TableName = "Products"; base.Response.WriteXpShopJson.DtToJSONthumbnailImg; 这里是问题函数，我就不写怎么跟进来的，就是pageload,等下直接用payload测试就好了，官网demo的。...

show-story.com XSS vulnerability

Open Bug Bounty ID: OBB-112537 Description| Value ---|--- Affected Website:| show-story.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

reitmans.com XSS vulnerability

Vulnerable URL: http://www.reitmans.com/on/demandware.store/Sites-ReitmansCA-Site/default/Search-Show?q=...

Photo Transfer (2) v1.0 iOS - Denial of Service Vulnerability

Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ===================================...

shop.diesel.com XSS vulnerability

Vulnerable URL: http://shop.diesel.com/search-show?q=alert/XSSPOSED/...

WordPress Slider Revolution Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Slider Revolution revslider is one of the slideshow plugin. A directory traversal vulnerability exists in...

CollabNet Subversion Edge Management Show LFI

Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via "fileName" parameter of the show action Date: 10.10.2014 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Local file...

Microsoft Internet Explorer ShowSaveFileDialog DLL Loading Arbitrary Code Execution Vulnerability

Microsoft Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer suffers from an arbitrary code execution vulnerability in its implementation, which can be exploited by an attacker who places a file in a remotely accessible UNC or WebDAV share location to execute arbitrary...