310 matches found
Learn Russian Words Free - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Learn Russian Words Free published at the 'play' market has multiple vulnerabilities...
Learn French 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Learn French 6,000 Words published at the 'play' market has multiple vulnerabilities...
Learn Spanish 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Learn Spanish 6,000 Words published at the 'play' market has multiple vulnerabilities...
Learn to write German words - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Learn to write German words published at the 'play' market has multiple vulnerabilities...
Learn English Words Free - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Learn English Words Free published at the 'play' market has multiple vulnerabilities...
Learn German 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Learn German 6,000 Words published at the 'play' market has multiple vulnerabilities...
targets-ipv6-wordlist NSE Script
Adds IPv6 addresses to the scan queue using a wordlist of hexadecimal "words" that form addresses in a given subnet. Script Arguments targets-ipv6-wordlist.nsegments Number User can indicate exactly how big the word must be on Segments of 16 bits. targets-ipv6-wordlist.fillright With this argumen...
Updated KDE 4 and related packages move to KDE 4.12.5
This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12. This update fixes several security vulnerabilities - KMail/KIO POP3 SSL MITM Flaw CVE-2014-3494 - mga13545 - KAuth PID Reuse...
CVE-2014-5548
The Christmas Words aka air.com.sevenBulls.summerWords application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Christmas Words aka air.com.sevenBulls.summerWords application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5548
The Christmas Words aka air.com.sevenBulls.summerWords application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5548
The CVE-2014-5548 entry pertains to The Christmas Words app (Android, 1.0.1) which does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive data via crafted certificates. Affected component is the Android app’s SSL certificat...
Elite Gaming Ladders 3.0 - SQL Injection Exploit
No description provided by source. Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit Date: January 3rd, 2010 Author: Sora Version: 3.0 Tested on: Windows and Linux ---------------------------------------- Elite Gaming Ladders v3.0 SQL Injection Exploit Contact: vhr95zw at hotmail dot...
Microsoft Word RTF Drawing Primitives Remote Code Execution (MS08-072) - Ver2 (CVE-2008-4028)
Rich Text Format RTF provides a format for text and graphics interchange that can be used with different operating systems. OLE is the technology that applications use to create and edit compound documents. By using OLE technology, an application can provide embedding and linking support. A remot...
XDCMS企业管理系统SQL注入#1
简要描述: 最新版XDCMS企业管理系统,由于过滤不严,可绕过限制,导致多处SQL注入 详细说明: 注入在XDCMS企业管理系统的注册功能处,来看看\system\modules\member\index.php文件: 注册时会调用registersave,问题就出在index.php的registersave函数处: public function registersave $username=safehtml$POST'username';//获取UserName,这里用safehtml函数进行过滤 $password=$POST'password';...
Cracking iPhone Hotspot password in 50 Seconds
The ability to turn your iPhone into a Wi-Fi hotspot is a fantastically useful little tool in and of itself. When setting up a personal hotspot on their iPad or iPhone, users have the option of allowing iOS to automatically generate a password. According to a new study by Researchers at the...
Cracking iPhone Hotspot password in 50 Seconds
The ability to turn your iPhone into a Wi-Fi hotspot is a fantastically useful little tool in and of itself. When setting up a personal hotspot on their iPad or iPhone, users have the option of allowing iOS to automatically generate a password. According to a new study by Researchers at the...
password_profiling
This plugin creates a list of possible passwords by reading responses and counting the most common words. Plugin type Grep Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests, theres always the source code to understa...
kernel: incomplete fix for CVE-2011-4131
The nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service OOPS by sending an excessive number of bitmap words in an...
David Koblas' GIF decoder LZW decoder buffer overflow
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...