Tecnovision DLX Spot - SSH Backdoor Access

Tecnovision DLX Spot - SSH Backdoor Access Exploit Title: DlxSpot - Player4 LED video wall - Hardcoded Root SSH Password. Google Dork: "DlxSpot - Player4" Date: 2017-05-14 Discoverer: Simon Brannstrom Authors Website: https://unknownpwn.github.io/ Vendor Homepage: http://www.tecnovision.com/...

tpelectric.ir XSS vulnerability

Vulnerable URL: http://www.tpelectric.ir/fa/user/temp.php?t==103&nameproduct2;=Wall Mount Socket Outlet Straight...

The Wall Street Journal: News - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Wall Street Journal: News published at the 'play' market has multiple vulnerabilities...

Joomla Sponsor Wall Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. SQL injection vulnerability in Joomla Sponsor Wall component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Sponsor Wall 7.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba Mobha...

Joomla Sponsor Wall 7.0 SQL Injection

Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir...

Joomla! Component Sponsor Wall 7.0 - 'wallid' SQL Injection

Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir...

Linux Kernel 2.6.22 < 3.9 - Dirty COW /proc/self/mem Race Condition Privilege Escalation (/etc/pa

Exploit for linux platform in category local exploits // EDB-Note: Compile: g++ -Wall -pedantic -O2 -std=c++11 -pthread -o dcow 40847.cpp -lutil // EDB-Note: Recommended way to run: ./dcow -s Will automatically do "echo 0 /proc/sys/vm/dirtywritebackcentisecs" // //...

Wall Switch - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Wall Switch published at the 'play' market has multiple vulnerabilities...

Ruckus Wireless H500 Denial of Service Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A denial of service vulnerability exists in the web management interface of the Ruckus Wireless H500. An attacker could exploit this...

PHP < 5.6.18, 7.x < 7.0.3 DoS Vulnerability (Jul 2016) - Windows

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Wireless Keyloggers Hidden in USB Wall Chargers, FBI Warns

A private industry notification sent by the FBI in late April to its business partners warns of the risks associated with KeySweeper, a tool released in January 2015 by noted hardware hacker and researcher Samy Kamkar. Sixteen months ago, Kamkar released the source code and instructions on how to...

Uber: Reflected XSS via Livefyre Media Wall in newsroom.uber.com

Hello @uber, This vulnerability works in all sites where there Livefyre Media Wall, including newsroom.uber.com. To reproduce this Cross-Site Scripting, visit this URL: https://newsroom.uber.com/?lf-content=danylod.com/uber.php?:131560603:307477931 Vulnerable is this source code:...

Wall Ball - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Wall Ball published at the 'play' market has multiple vulnerabilities...

Building the China Wall - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Building the China Wall published at the 'play' market has multiple vulnerabilities...

Picross Wall ( Puzzle ) - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Picross Wall Puzzle published at the 'play' market has multiple vulnerabilities...

Bridge the Wall - Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bridge the Wall published at the 'play' market has multiple vulnerabilities...

The Berlin Wall - Corrupted files, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application The Berlin Wall published at the 'play' market has multiple vulnerabilities...

Chamilo LMS IDOR - messageId Delete POST Injection

Chamilo LMS IDOR - messageId Delete POST Injection Document Title: =============== Chamilo LMS IDOR - messageId Delete POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1720 Video: https://www.youtube.com/watch?v=3ApPhUIk12Y Relea...

Chamilo LMS IDOR - 'messageId' Delete POST Injection

Document Title: =============== Chamilo LMS IDOR - messageId Delete POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1720 Video: https://www.youtube.com/watch?v=3ApPhUIk12Y Release Date: ============= 2016-02-15 Vulnerability...