SAP TREX Directory Traversal Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. A directory traversal vulnerability exists in SAP TREX because the program fails to adequately filter user-submitted input. An attacker could leverage the directory traversal character '...' The vulnerabili...

Stopwatch and Timer - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Stopwatch and Timer published at the 'play' market has multiple vulnerabilities...

Red Hat JBoss Products RMI Java Deserialization Vulnerability (Nov 2015) - Active Check

Red Hat JBoss products are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

انتخاباتي - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application انتخاباتي published at the 'play' market has multiple vulnerabilities...

ИНТЕРПРОМБАНК Mobile-office - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application ИНТЕРПРОМБАНК Mobile-office published at the 'play' market has multiple vulnerabilities...

Jenkins CLI RMI Java Deserialization Vulnerability (Nov 2015) - Active Check

Jenkins is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ...

Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products

A vulnerability in the ASN1C compiler by Objective Systems affects Cisco ASR 5000 devices running StarOS and Cisco Virtualized Packet Core VPC systems. The vulnerability could allow an unauthenticated, remote attacker to create a denial of service DoS condition or potentially execute arbitrary...

Oracle Java MethodHandle Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the MethodHandle...

Joomla! SecurityCheck and SecurityCheck Pro SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . SecurityCheck and SecurityCheck Pro are among the network security extension components. A SQL injection vulnerability exists in...

LI-8100App - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application LI-8100App published at the 'play' market has multiple vulnerabilities...

Bank Respublika MobilBank - Suspicious files, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bank Respublika MobilBank published at the 'play' market has multiple vulnerabilities...

FTPServer - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application FTPServer published at the 'play' market has multiple vulnerabilities...

Alchemy - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Alchemy published at the 'play' market has multiple vulnerabilities...

The vulnerability of the automated system for managing technological processes, KingSCADA, allows a remote attacker to perform a maintenance failure, provided that the user opens a specially crafted XML document.

The vulnerability of the automated system for managing technological processes, KingSCADA, is related to the unsafe processing of external XML entities. Exploiting this vulnerability allows a malicious attacker to perform a service failure, provided that the user opens a specially crafted XML...

SQLite3 -- Tempdir Selection Vulnerability

KoreLogic security reports: Affected versions of SQLite reject potential tempdir locations if they are not readable, falling back to '.'. Thus, SQLite will favor e.g. using cwd for tempfiles on such a system, even if cwd is an unsafe location. Notably, SQLite also checks the permissions of '.', b...

Advantech WebAccess Arbitrary Code Execution Vulnerability (CNVD-2016-04291)

Advantech WebAccess formerly known as BroadWin WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An...

Android Device Manager - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Android Device Manager published at the 'play' market has multiple vulnerabilities...

Arbitrary File Write Vulnerability in SiteServer CMS Backend

SiteServer CMS is a website content management system developed by Beijing Billion Software Technology Development Co., Ltd. and is widely used in state ministries, group companies and large-scale portal sites. The information collection function in the management background of SiteServer CMS doe...

CVE-2016-1693

Removed by vendor...

Process Hacker DLL Hijacking

Hi Wen Jia, You probably heart about the Java issue which affected their installer. http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html However this issue also affects multiple other installers as a security researcher has shown...