524 matches found
Signature Exploitation
github.com/square/go-jose is vulnerable to signature exploitation attacks. During the validation of a signed message, the API does not indicate whether the signature is valid or not. This may lead to confusion if another library assumes the signatures attached are the ones that were originally...
dublinsquarepub.com XSS vulnerability
Vulnerable URL: http://www.dublinsquarepub.com/news.php?id=-1%20UNION%20SELECT%201,0x3c7363726970743e616c65727428224f50454e425547424f554e545922293b3c2f7363726970743e,3,4,5,6%20from%20guestbook-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017...
Square Open Source: Cache poisoning for okhttp
If an attacker can control the Host header this can be used to poison the cache. This becomes extra dangerous if the library were to be used to build a caching proxy...
Botan Denial of Service Vulnerability
Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. The Botan modular square root algorithm fails to properly condition check, allowing remote attackers to exploit this vulnerability for denial of service attacks...
Debian DSA-3565-1 : botan1.10 - security update
Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. - CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector...
[SECURITY] [DSA 3565-1] botan1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...
DSA-3565-1 botan1.10 - security update
Bulletin has no description...
Debian Security Advisory DSA 3565-1 (botan1.10 - security update)
Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector i...
[SECURITY] [DLA 449-1] botan1.10 security update
Package : botan1.10 Version : 1.10.5-1+deb7u1 CVE ID : CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849 Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, includi...
Hyper Square - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hyper Square published at the 'play' market has multiple vulnerabilities...
Spider Square - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Spider Square published at the 'play' market has multiple vulnerabilities...
Square Photo - No Crop Pic - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Square Photo - No Crop Pic published at the 'play' market has multiple vulnerabilities...
Square Blur: No crop insta pic - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Square Blur: No crop insta pic published at the 'play' market has multiple vulnerabilities...
Insta square size pic grid - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Insta square size pic grid published at the 'play' market has multiple vulnerabilities...
Insta Square Maker -No Crop HD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Insta Square Maker -No Crop HD published at the 'play' market has multiple vulnerabilities...
Square Video:Video Editor - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Square Video:Video Editor published at the 'play' market has multiple vulnerabilities...
Square Size SnapChat Desfoques - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Square Size SnapChat Desfoques published at the 'play' market has multiple vulnerabilities...
Square Photo - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Square Photo published at the 'play' market has multiple vulnerabilities...
Square Quick Pro-No Crop Photo - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Square Quick Pro-No Crop Photo published at the 'play' market has multiple vulnerabilities...
Collage Square Insta No Crop - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Collage Square Insta No Crop published at the 'play' market has multiple vulnerabilities...