899 matches found
Accessing data on Self-Encrypting drives while a system is in sleep state
Lenovo Security Advisory: LEN-2910 Potential Impact: Physical access of encrypted data Severity: Informational Summary: At the BlackHat Europe 2015 conference, KPMG disclosed an industry-wide vulnerability affecting hard disk drives that employ hardware-based Full Disk Encryption FDE. These drive...
Uber: SQL Injection on sctrack.email.uber.com.cn
Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...
Streamo Online Radio And TV Streaming CMS - SQL Injection
Streamo Online Radio And TV Streaming CMS - SQL Injection Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...
iSQL 1.0 Shell Command Injection
!/bin/ruby Exploit Title: iSQLRL 1.0 - Shell Command Injection Date: 2016-06-13 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/roselone/iSQL Software Link: https://github.com/roselone/iSQL/archive/master.zip Version: 1.0 Tested on: Debian wheezy CVE...
FreeBSD : hostapd and wpa_supplicant -- multiple vulnerabilities (976567f6-05c5-11e6-94fa-002590263bf5)
Jouni Malinen reports : wpasupplicant unauthorized WNM Sleep Mode GTK control. 2015-6 - CVE-2015-5310 EAP-pwd missing last fragment length validation. 2015-7 - CVE-2015-5315 EAP-pwd peer error path failure on unexpected Confirm message. 2015-8 - CVE-2015-5316 %NASLMINLEVEL 70300 C Tenable Network...
ROPInjector - Convert any Shellcode in ROP and patch it into a given Portable Executable (PE)
A tool written in C Win32 to convert any shellcode in ROP and patch it into a given portable executable PE. It supports only 32-bit target PEs and the x86 instruction set. Published in Blackhat USA 2015, "ROPInjector: Using Return Oriented Programming for Polymorphism and Antivirus Evasion" More...
悟空CRM无需任何权限的SQL注入漏洞2（ThinkPHP特性）
简要描述： 一个没有权限控制的类，正好又有注入 （给L.N.添堵系列之三） 另外厂商分给高点呗，别这么小气本来不想挖了的。 详细说明： /App/Lib/Mobile/LogMobile.class.php 这个类没有权限验证（initialize方法）哦 看到edit函数： //修改沟通日志 public function edit if$this-isPost $id = isset$POST'id' ? intval$POST'id' : 0; $params = jsondecode$POST'params',true; if!isarray$params...
Sleep Bug Kids Lite - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sleep Bug Kids Lite published at the 'play' market has multiple vulnerabilities...
Lullaby Pony Sleep - Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Lullaby Pony Sleep published at the 'play' market has multiple vulnerabilities...
Baby Sleep - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Baby Sleep published at the 'play' market has multiple vulnerabilities...
Sleep Music and Sounds - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Sleep Music and Sounds published at the 'play' market has multiple vulnerabilities...
Healthy Sleep Diary - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Healthy Sleep Diary published at the 'play' market has multiple vulnerabilities...
Deep Sleep and Relax Hypnosis - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Deep Sleep and Relax Hypnosis published at the 'play' market has multiple vulnerabilities...
Forest Sounds Nature To Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Forest Sounds Nature To Sleep published at the 'play' market has multiple vulnerabilities...
Sleep Tight Night Light - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Sleep Tight Night Light published at the 'play' market has multiple vulnerabilities...
Sleep Diary Lite - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Sleep Diary Lite published at the 'play' market has multiple vulnerabilities...
Sounds for Baby Sleep Music - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sounds for Baby Sleep Music published at the 'play' market has multiple vulnerabilities...
Nature Sounds Relax and Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Nature Sounds Relax and Sleep published at the 'play' market has multiple vulnerabilities...
Relax and Sleep for everyone - Base64 encoded String, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Relax and Sleep for everyone published at the 'play' market has multiple vulnerabilities...
Sleep Calculator - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Sleep Calculator published at the 'play' market has multiple vulnerabilities...