Yellow Pages Clone Script 1.3.4 - SQL Injection

Yellow Pages Clone Script 1.3.4 - SQL Injection Exploit Title: Yellow Pages Clone Script v1.3.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/yellow-pages-clone-script/ Demo:...

MC Yellow Pages Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author...

MC Yellow Pages SQL Injection

Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktane...

MC Yellow Pages Script - SQL Injection

Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet S...

Emoticons pack, Yellow cute - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Emoticons pack, Yellow cute published at the 'play' market has multiple vulnerabilities...

Database Assessment Tool: DbDat

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

Loki - Scanner for Simple Indicators of Compromise

Simple IOC Scanner Detection is based on four detection methods: 1. File Name IOC Regex match on full file path/name 2. Yara Rule Check Yara signature match on file data and process memory 3. Hash check Compares known malicious hashes MD5, SHA1, SHA256 with scanned files The Windows binary is...

yellowpages.washingtonpost.com XSS vulnerability

Open Bug Bounty ID: OBB-56053 Description| Value ---|--- Affected Website:| yellowpages.washingtonpost.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Buffer overflow

The White & Yellow Pages aka com.avantar.wny application 5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5857

CVE-2014-5857 affects the White & Yellow Pages (com.avantar.wny) Android app 5.1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and read sensitive information via a crafted certificate. Concrete detai...

PT-2014-6842

Name of the Vulnerable Software and Affected Versions The White & Yellow Pages aka com.avantar.wny application version 5.1.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-5857: Undefined Security Weakness

The White & Yellow Pages aka com.avantar.wny application 5.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5758

The Yellow Pages Local Search aka com.yellowbook.android2 application 11.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Buffer overflow

The Yellow Pages Local Search aka com.yellowbook.android2 application 11.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5758

The Yellow Pages Local Search aka com.yellowbook.android2 application 11.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5758

CVE-2014-5758 affects the Yellow Pages Local Search app (com.yellowbook.android2) version 11.0.0 on Android. The underlying issue is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certifi...

CVE-2014-5758: Undefined Security Weakness

The Yellow Pages Local Search aka com.yellowbook.android2 application 11.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6743

Name of the Vulnerable Software and Affected Versions The Yellow Pages Local Search aka com.yellowbook.android2 application version 11.0.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...

HP-UX 10/11,IRIX 3/4/5/6,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1 RPC.YPUpdated Command Execution (2)

No description provided by source. HP-UX 10.x/11.x,IRIX 3.x/4.x/5.x/6.x,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1.x RPC.YPUpdated Command Execution 2 source: http://www.securityfocus.com/bid/1749/info The 'rpc.ypupdated' deamon is part of the Network Information Service NIS or Yellow Pages Y...

PHPCMS2008 Yellow Pages module vulnerability-vulnerability warning-the black bar safety net

PHPCMS2008 Yellow Pages module vulnerability variable initialization is not strict lead to arbitrary PHP code execution PHPCMS2008 system string2array function calls eval with high-risk, in/yp/web/include/common. inc. php$menu variable initialization is not strict, the result can be injected to...