457 matches found
Leg SPA - casual games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Leg SPA - casual games published at the 'play' market has multiple vulnerabilities...
Fashion Doll: Shopping Day SPA - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fashion Doll: Shopping Day SPA published at the 'play' market has multiple vulnerabilities...
Princess Full-Body SPA - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Princess Full-Body SPA published at the 'play' market has multiple vulnerabilities...
Prom Spa Salon - Girls Games - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Prom Spa Salon - Girls Games published at the 'play' market has multiple vulnerabilities...
Pregnant Mommy SPA - Girl Game - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Pregnant Mommy SPA - Girl Game published at the 'play' market has multiple vulnerabilities...
Princess lips SPA girls games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Princess lips SPA girls games published at the 'play' market has multiple vulnerabilities...
julietsdayspa.com XSS vulnerability
Vulnerable URL: https://www.julietsdayspa.com/products/makeup/mcategory.php?txtTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Cisco UCS Central Software Security Vulnerabilities Patched
Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...
CVE-2015-0670
The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...
Default configuration
The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...
CVE-2015-0670
Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...
CVE-2014-7034
The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7034
CVE-2014-7034 affects the Android application of The Senator Inn & Spa (package com.conduit.app_cc06e8e9659c4cf7b361ad0b7717f3a4.app) version 1.2.2.160. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and...
CVE-2014-7034
The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5941
The Armpit Spa & Girl Games aka com.freegames.spamakeover application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5941
CVE-2014-5941 affects the Android app Armpit Spa & Girl Games (com.freegames.spamakeover) version 1.0.2. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerab...
Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS
No description provided by source. Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS Date: date: 17/09/10 Author: d0lc3 @rmallof http://elotrolad0.blogspot.com/ Software Link: http://www.hp.com Version: 6.11 Tested on: Windows XP SP3 Spa Sumary: HP Dat...
Exim <= 4.43 auth_spa_server() Remote PoC Exploit
No description provided by source. / ecl-eximspa.c Yuri Gushin [email protected] Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size...