All-In-One Toolbox (Cleaner) - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application All-In-One Toolbox Cleaner published at the 'play' market has multiple vulnerabilities...

GPS Status & Toolbox - Corrupted files, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application GPS Status & Toolbox published at the 'play' market has multiple vulnerabilities...

Toolbox 1.4 - flyer.php mls Parameter SQL Injection

The toolbox WordPress theme was affected by a flyer.php mls Parameter SQL Injection security vulnerability...

CVE-2013-2804

CVE-2013-2804 affects Software Toolbox TOP Server DNP Master Driver (OPC Server) on Windows, before version 5.12.140.0. Root cause: improper input validation that allows crafted DNP3 traffic to TCP port 20000 or crafted input over serialization to cause the master to enter an infinite loop and cr...

PT-2013-3943

Name of the Vulnerable Software and Affected Versions Software Toolbox TOP Server versions prior to 5.12.140.0 Description The issue allows remote attackers to cause a denial of service via crafted DNP3 packets to TCP port 20000, and physically proximate attackers to cause a denial of service via...

CVE-2013-2804: Improper Input Validation

The DNP Master Driver in Software Toolbox TOP Server before 5.12.140.0 allows remote attackers to cause a denial of service master-station infinite loop via crafted DNP3 packets to TCP port 20000 and allows physically proximate attackers to cause a denial of service master-station infinite loop v...

Top Server OPC Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the Software Toolbox TOP Server DNP Master OPC product. Software Toolbox has produced a new version that mitigates this vulnerability. The researchers have test...

WordPress Theme Toolbox - 'mls' SQL Injection

source: https://www.securityfocus.com/bid/56745/info The Toolbox theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...

WordPress Theme Toolbox - mls SQL Injection

WordPress Theme Toolbox - mls SQL Injection source: https://www.securityfocus.com/bid/56745/info The Toolbox theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this...

Website Toolbox Cross Site Scripting

Exploit Title: Website Toolbox Cross Site Scripting Date: 7.04.2012 Author: Sony Software Link: http://websitetoolbox.com Web Browser : Mozilla Firefox Site : http://insecurity.ro PoC: http://st2tea.blogspot.com/2012/04/website-toolbox-cross-site-scripting.html...

Moderate: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

libxml2 security update

CentOS Errata and Security Advisory CESA-2012:0016 Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS bas...

Auto Web Toolbox SQL Injection

Exploit Title: Auto Web Toolbox SQL Injection Vulnerability Google Dork: intext:Auto Web Toolbox Date: 14/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.autowebtoolbox.com/ Tested on: Windows 7 http://www.autowebtoolbox.com/inventory/details.php?id=496...

Auto Web Toolbox - id SQL Injection

Auto Web Toolbox - id SQL Injection source: https://www.securityfocus.com/bid/48683/info Auto Web Toolbox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker t...

Auto Web Toolbox - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48683/info Auto Web Toolbox is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access...

CVE-2007-6139

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...

CVE-2007-6139

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...

CVE-2007-6139

CVE-2007-6139 is a PHP remote file inclusion vulnerability in Mp3 ToolBox 1.0 beta 5. The flaw is in index.php where an attacker can supply a URL in the skin_file parameter to execute arbitrary PHP code. Affected software: Mp3 ToolBox 1.0 beta 5 (index.php, skin_file). The linked sources show pub...

CVE-2007-6139: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...