BidBag Bid Sniper for eBay - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application BidBag Bid Sniper for eBay published at the 'play' market has multiple vulnerabilities...

Pwn2Own Day Two: Safari, Microsoft Edge Go Down Winner Announced

In the end, it was a nail-biter pitting Tencent Security Team Sniper KeenLab and PC Manager against JungHoon Lee lokihardt for the title of Master of Pwn for Pwn2Own 2016. After a tense last two minutes of the competition, it was Tencent Security Team Sniper and its successful code execution of a...

Dennis Fisher and Mike Mimoso Discuss the Rifle Hack, Stagefright, OwnStar, and Black Hat 2015

Dennis Fisher and Mike Mimoso discuss the hacked sniper rifle, the huge Android bug in Stagefright, Samy Kamkar’s OwnStar device, and the joy and pain of next week’s Black Hat conference. Download: digitalunderground215.mp3 Music by Chris Gonsalves...

Researchers Hack TrackingPoint Rifle's Precision Targeting System

TrackingPoint rifles are state-of-the-art precision hunting and sniper rifles that come equipped with a networked tracking scope that’s accessible via Wi-Fi, and comes complete with USB ports and a mobile app. It’s almost foolproof shooting, albeit at a $13,000 price tag. And the security of all ...

WordPress Plugin Really Simple Guest Post 1.0.6 - Local File Inclusion

WordPress Plugin Really Simple Guest Post 1.0.6 - Local File Inclusion Exploit Title: Wordpress Really Simple Guest Post File Include Google Dork: inurl:"really-simple-guest-post" intitle:"index of" Date: 04/06/2015 Exploit Author: Kuroi'SH Software Link:...

CVE-2014-6737

The CVE-2014-6737 entry concerns the Android app “The Ultimate Target-Armored Sniper” (aka air.wood.liame.ultimatetarget), version 1.0.1. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and exfiltrate se...

CVE-2014-6737

The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5624

The CVE-2014-5624 entry applies to the Android app “The Sniper Shooter Free - Fun Game” (com.fungamesforfree.snipershooter.free), version 2.8, where SSL connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof trusted servers and obtain sensitive ...

PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) RFI Vulnerability

No description provided by source. Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powered by phpMyDesktop|arcade v1.0...

Media Player Classic 1.3.1774.0 - (.rm file) buffer Overflow PoC

No description provided by source. Exploit Title: Media Player Classic - v 1.3.1774.0 .rm file buffer Overflow poc Date: 2010-05-22 Author: sniper ip Software Link: Version: v 1.3.1774.0 Tested on: Windows xp2 , Windows xp3 , Windows 7 CVE : if exists Code : !/usr/bin/perl...

GameRoom Script Admin Bypass and File Upload Vulnerability

No description provided by source. |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script nam...

Bradamsa - Burp Suite extension to generate Intruder payloads using Radamsa

Bradamsa is a Burp Suite extension for Radamsa, a well-known fuzzer made by the Oulu University Secure Programming Group. Inspired by burp-radamsa, this plugin allows to generate Intruder payloads using Radamsa. Features Java-based plugin using native Burp Suite extension APIs Intruder payloads...

FTPPad 1.2.0 - Remote Stack Buffer Overflow (Metasploit)

$Id: ftppadlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BackLinkSpider 1.3.1774.0 SQL Injection / Cross Site Scripting

Exploit Title: BackLinkSpider - links.php - SQL & XSS Injection Vulnerability Date: 2010-05-27 Author: sniper ip Software Link: http://www.backlinkspider.com Version: v 1.3.1774.0 Tested on: CVE : if exists Exploit : SQL...

Media Player Classic 1.3.1774.0 Buffer Overflow

Exploit Title: Media Player Classic - v 1.3.1774.0 .rm file buffer Overflow poc Date: 2010-05-22 Author: sniper ip Software Link: Version: v 1.3.1774.0 Tested on: Windows xp2 , Windows xp3 , Windows 7 CVE : if exists Code : !/usr/bin/perl...

Media Player Classic 1.3.1774.0 - .rm Buffer Overflow (PoC)

Media Player Classic 1.3.1774.0 - .rm Buffer Overflow PoC Exploit Title: Media Player Classic - v 1.3.1774.0 .rm file buffer Overflow poc Date: 2010-05-22 Author: sniper ip Software Link: Version: v 1.3.1774.0 Tested on: Windows xp2 , Windows xp3 , Windows 7 CVE : if exists Code : !/usr/bin/perl...

Media Player Classic - v 1.3.1774.0 (.rm file) buffer Overflow poc

Exploit for windows platform in category dos / poc ================================================================== Media Player Classic - v 1.3.1774.0 .rm file buffer Overflow poc ================================================================== Exploit Title: Media Player Classic - v...

Media Player Classic 1.3.1774.0 - '.rm' Buffer Overflow (PoC)

Exploit Title: Media Player Classic - v 1.3.1774.0 .rm file buffer Overflow poc Date: 2010-05-22 Author: sniper ip Software Link: Version: v 1.3.1774.0 Tested on: Windows xp2 , Windows xp3 , Windows 7 CVE : if exists Code : !/usr/bin/perl...

AtACimo RC2 (index.php) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================= AtACimo RC2 index.php XSS Vulnerability ========================================= Exploit Title: AtACimo RC2 index.php XSS Vulnerability Date: 2010-02-25 Author: sniper ip Software Link:...

GameRoom Script - Authentication Bypass Arbitrary File Upload

GameRoom Script - Authentication Bypass Arbitrary File Upload |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x!...