VMs Freezing or Poor Performance (xenvbd event ID 129)

VMs are encountering hang or poor performance issue related with disk I/O. xenvbd event ID 129 . From VM event log: ++++++++++ xenvbd event ID 129 \Device\RaidPort0 reset ++++++++++ - From XenServer messages log: ++++++++++ messages.1: Mar 8 14:11:35 MXVDIS01X tap-ctl1481: tap-err:tapctlreadraw:...

Logic design flaws in Tap Tech's smart CAPTCHA system

Smart CAPTCHA system is a new generation of Internet CAPTCHA system. A logical design vulnerability exists in the Smart CAPTCHA System of Point and Click Technology. An attacker can bypass the graphical CAPTCHA of the mouse-click method by modifying the status code, which can be utilized to bypas...

VPNPivot - Explore Internal Networks

Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around like port...

Tap Tap Dash - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tap Tap Dash published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

CVE-2016-8362

CVE-2016-8362 affects Moxa OnCell OnCellG3470A-LTE and a wide range of AWK/WAC/TAP models. The issue is described as Improper Authentication that allows any user to download log files by accessing a specific URL, with an attack scenario that does not require authentication. Impact in the public a...

CVE-2016-4986

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter...

CVE-2016-4986

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter...

CVE-2016-4986

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter...

CVE-2016-4986

The CVE-2016-4986 entry concerns a directory traversal in the Jenkins TAP Plugin (versions before 1.25). The vulnerability allows remote attackers to read arbitrary files via an unspecified parameter, exposing partial confidentiality and reflecting a network-accessible risk with low complexity an...

How to capture network trace for a XenServer VM while booting up ?

In order to troubleshoot issues related to TFTP or DHCP, we may need to capture network traces during initial VM bootup. As Virtual interface is not loaded during initial bootup phase of VM, we need to capture trace on the tap device...

tap-mro.com XSS vulnerability

Vulnerable URL: https://www.tap-mro.com/Pages/Pub1/mejs/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5045910 VIP website...

TAP Portugal - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TAP Portugal published at the 'play' market has multiple vulnerabilities...

Tap play the Anime Music Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tap play the Anime Music Game published at the 'play' market has multiple vulnerabilities...

Tap-Tap Dance - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tap-Tap Dance published at the 'play' market has multiple vulnerabilities...

Kids Tap and Color (Lite) - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Kids Tap and Color Lite published at the 'play' market has multiple vulnerabilities...

Fireworks Tap 2 - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks Tap 2 published at the 'play' market has multiple vulnerabilities...

Tap Bird 2D - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tap Bird 2D published at the 'play' market has multiple vulnerabilities...

Christmas Tap Crunch - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Tap Crunch published at the 'play' market has multiple vulnerabilities...

Jumpy Turtle - Best Tap Game - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Jumpy Turtle - Best Tap Game published at the 'play' market has multiple vulnerabilities...