FRITZ!App Ticker Widget - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FRITZ!App Ticker Widget published at the 'play' market has multiple vulnerabilities...

Comic Widget - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Comic Widget published at the 'play' market has multiple vulnerabilities...

Ba dum tss - Rimshot widget - WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Ba dum tss - Rimshot widget published at the 'play' market has multiple vulnerabilities...

Wear Charging Widget - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wear Charging Widget published at the 'play' market has multiple vulnerabilities...

Simple Calendar Widget - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Simple Calendar Widget published at the 'play' market has multiple vulnerabilities...

WordPress Altos Connect Widget 1.3.0 XSS 漏洞

文件：/wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php 上代码 " id="refreshimg" title="Click to refresh image"" width="132" height="46" alt="Captcha image" / Enter the characters as seen on the image above case insensitive: 第三行中...

chromium-browser: use-after-free in Navigation

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

IMDb Profile Widget <= 1.0.8 - Local File Inclusion (LFI)

The imdb-widget WordPress plugin was affected by a Local File Inclusion LFI security vulnerability...

CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

UBUNTU-CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

WordPress IMDb Profile Widget 1.0.8 Local File Inclusion

Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage: https://wordpress.org/plugins/imdb-widget/ Tested on: MSWin32 Version: 1.0.8 Vuln file : pic.php...

WordPress IMDb Profile Widget 1.0.8 Plugin - Local File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage: https://wordpress.org/plugins/imdb-widget/...

WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion

Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage: https://wordpress.org/plugins/imdb-widget/ Tested on: MSWin32 Version: 1.0.8 Vuln file : pic.php...

WordPress IMDb Profile Widget Plugin 1.0.8 - Local File Inclusion

IMDb Profile Widget plugin is prone to a local file inclusion vulnerability. Solution Upgrade the plugin...

WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion

WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion Exploit Title: Wordpress Plugin IMDb Profile Widget - Local File Inclusion Exploit Author: CrashBandicot @DosPerl Date: 2016-03-26 Google Dork : inurl:/wp-content/plugins/imdb-widget Vendor Homepage:...

Google Chrome Multiple Vulnerabilities (Mar 2016) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

chromium-browser: same-origin bypass in Blink

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1630

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...

Design/Logic Flaw

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2016-1630

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...