211 matches found
sweettemptations.altervista.org Open Redirect vulnerability
Open Bug Bounty ID: OBB-1174908 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow
Exploit Title: SocuSoft iPod Photo Slideshow 8.05 - Buffer Overflow SEH Date: 2018-09-08 Author: Shubham Singh Known As: Spirited Wolf Twitter: @Pwsecspirit Software Link:http://www.dvd-photo-slideshow.com/ipod-photo-slideshow.html Tested Version: 8.05 Tested on OS: Windows XP Service Pack 3 x86...
sweet-buds.com XSS vulnerability
Open Bug Bounty ID: OBB-622338 Description| Value ---|--- Affected Website:| sweet-buds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Blackboard Learn Open Redirect
CVE-2017-18262 Description Since at least the 17th of October 2017 Initial report date Blackboard Learn has allowed Unvalidated Redirects on any signed in user through its endpoints for handling Shibboleth logins. The vulnerable endpoint is:...
sweet-family.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-546967 Description| Value ---|--- Affected Website:| sweet-family.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sweet-p.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-484092 Description| Value ---|--- Affected Website:| sweet-p.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...
SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based...
SweetSecurity - Network Security Monitoring on Raspberry Pi type devices
Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. Getting Sweet Security Either download the Github repository manually, or clone the repo with the following command: $ git clone https://github.com/travisfsmith/sweetsecurity Prerequisites Mos...
sweet-vicky.com XSS vulnerability
Vulnerable URL: http://www.sweet-vicky.com/tour2016/index.php?nats=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1980886 VIP website status:| No Chec...
Khan Academy: SSL/TLS Vulnerability at khanacademy.org
CVE - 2011 - 3389 Description : The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle...
UBUNTU-CVE-2016-2183
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...
Sweet Baby Girl Cleanup 4 - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Baby Girl Cleanup 4 published at the 'play' market has multiple vulnerabilities...
Sweet Baby Girl - Clean Up 2 - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Baby Girl - Clean Up 2 published at the 'play' market has multiple vulnerabilities...
Strawberry Sweet Shop - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Strawberry Sweet Shop published at the 'play' market has multiple vulnerabilities...
Sweet Little Emma Winterland - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Little Emma Winterland published at the 'play' market has multiple vulnerabilities...
Sweet Baby Girl - Clean Up - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Baby Girl - Clean Up published at the 'play' market has multiple vulnerabilities...
Sweet Little Dwarfs - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Little Dwarfs published at the 'play' market has multiple vulnerabilities...
Sweet Baby Girl - Beach Picnic - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Sweet Baby Girl - Beach Picnic published at the 'play' market has multiple vulnerabilities...
Candy Sweet - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Candy Sweet published at the 'play' market has multiple vulnerabilities...
Delicious - Home Sweet Home - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Delicious - Home Sweet Home published at the 'play' market has multiple vulnerabilities...