exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Muneaki Nishimura

Apache Cordova iOS 3.9.1 Access Bypass

Posted Apr 28, 2016

Authored by Muneaki Nishimura

Apache Cordova iOS versions 3.9.1 and below suffer from an access bypass vulnerability.

tags | advisory, bypass

systems | ios

advisories | CVE-2015-5207

SHA-256 | fae203a05fc5e593cedf2d62a055f9b7f81ada5058f60301bd2b9a2abe342180

Download | Favorite | View

Apache Cordova iOS 3.9.1 Arbitrary Plugin Execution

Posted Apr 28, 2016

Authored by Muneaki Nishimura

Apache Cordova iOS versions 3.9.1 and below allow for arbitrary plugin execution.

tags | advisory, arbitrary

systems | ios

advisories | CVE-2015-5208

SHA-256 | fefb824e808b4133ebdf4a6c2f3d50502a18ea0647eef7619d23119976a4004b

Download | Favorite | View

Apache Cordova 3.7.2 Whitelist Failure

Posted Nov 21, 2015

Authored by Muneaki Nishimura

Android applications created using Apache Cordova that use a remote server contain a vulnerability where whitelist restrictions are not properly applied. Improperly crafted URIs could be used to circumvent the whitelist, allowing for the execution of non-whitelisted Javascript. Versions 3.7.2 and below are affected.

tags | advisory, remote, javascript

advisories | CVE-2015-5256

SHA-256 | 468458d33746c0862b6ee47045cc0b4a5cc12550b39e5ec7f6aa2a3a16cc6bd8

Download | Favorite | View

Apache Cordova Android File Transfer Plugin 1.2.1 Header Injection

Posted Sep 25, 2015

Authored by Muneaki Nishimura

Apache Cordova Android File Transfer plugin versions 1.2.1 and below suffer from an HTTP header injection vulnerability.

tags | advisory, web

advisories | CVE-2015-5204

SHA-256 | 1c678a1c4f57462b9c536f091f42eac61d776820a65cd8bd687da721e960449a

Download | Favorite | View