Lucene search
+L

457 matches found

hackapp
hackapp
added 2016/04/01 9:54 a.m.16 views

Leg SPA - casual games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Leg SPA - casual games published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:53 a.m.12 views

Fashion Doll: Shopping Day SPA - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Doll: Shopping Day SPA published at the 'play' market has multiple vulnerabilities...

0.9AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:53 a.m.7 views

Princess Full-Body SPA - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Princess Full-Body SPA published at the 'play' market has multiple vulnerabilities...

0.2AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:53 a.m.14 views

Prom Spa Salon - Girls Games - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Prom Spa Salon - Girls Games published at the 'play' market has multiple vulnerabilities...

1.1AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:53 a.m.13 views

Pregnant Mommy SPA - Girl Game - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Pregnant Mommy SPA - Girl Game published at the 'play' market has multiple vulnerabilities...

0.4AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:53 a.m.7 views

Princess lips SPA girls games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Princess lips SPA girls games published at the 'play' market has multiple vulnerabilities...

0.1AI score
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2016/02/04 11:21 a.m.8 views

julietsdayspa.com XSS vulnerability

Vulnerable URL: https://www.julietsdayspa.com/products/makeup/mcategory.php?txtTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

6.3AI score
Exploits0
ThreatPost
ThreatPost
added 2015/05/07 2:21 p.m.22 views

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

0.7AI score
Exploits0References4
NVD
NVD
added 2015/03/21 1:59 a.m.21 views

CVE-2015-0670

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

6.4CVSS6.6AI score0.0175EPSS
Exploits0References2
Prion
Prion
added 2015/03/21 1:59 a.m.14 views

Default configuration

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

6.4CVSS7.2AI score0.0175EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2015/03/21 1:0 a.m.54 views

CVE-2015-0670

Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...

6.4CVSS6.8AI score0.0175EPSS
Exploits0References2Affected Software10
NVD
NVD
added 2014/10/16 7:55 p.m.12 views

CVE-2014-7034

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
Exploits0References3
Prion
Prion
added 2014/10/16 7:55 p.m.11 views

Information disclosure

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/10/16 7:0 p.m.37 views

CVE-2014-7034

CVE-2014-7034 affects the Android application of The Senator Inn & Spa (package com.conduit.app_cc06e8e9659c4cf7b361ad0b7717f3a4.app) version 1.2.2.160. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and...

5.4CVSS6AI score0.00266EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/10/16 7:0 p.m.18 views

CVE-2014-7034

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
Exploits0References3
NVD
NVD
added 2014/09/18 10:55 a.m.11 views

CVE-2014-5941

The Armpit Spa & Girl Games aka com.freegames.spamakeover application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
Exploits0References3
CVE
CVE
added 2014/09/18 10:0 a.m.42 views

CVE-2014-5941

CVE-2014-5941 affects the Android app Armpit Spa & Girl Games (com.freegames.spamakeover) version 1.0.2. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerab...

5.4CVSS6AI score0.00271EPSS
Exploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.42 views

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS

No description provided by source. Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS Date: date: 17/09/10 Author: d0lc3 @rmallof http://elotrolad0.blogspot.com/ Software Link: http://www.hp.com Version: 6.11 Tested on: Windows XP SP3 Spa Sumary: HP Dat...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.34 views

Exim <= 4.43 auth_spa_server() Remote PoC Exploit

No description provided by source. / ecl-eximspa.c Yuri Gushin [email protected] Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size...

7.1AI score
Exploits0
Rows per page
Query Builder