PT-2015-3487

Name of the Vulnerable Software and Affected Versions Ashampoo 3D CAD Professional versions prior to 3.0.2 Description The issue allows remote attackers to write to arbitrary files. This is achieved by providing a pathname in the first argument to the SaveData method in the Cygnicon.ViewControl.1...

Visa, MasterCard Remove Passwords from 3D Secure

Payment giants Visa and MasterCard announced plans to eliminate the need for password authentication in the companies’ respective “Verified by Visa” and “SecureCode” payment platforms which are designed to add an additional layer of security to online transactions. In a press release, MasterCard...

[SECURITY] Fedora 20 Update: kalgebra-4.14.1-1.fc20

2D and 3D Graph Calculator...

PT-2014-6883

Name of the Vulnerable Software and Affected Versions The Heavy Duty Truck Driver Simulator 3D versions 1.0.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-5898: Undefined Security Weakness

The Heavy Duty Truck Driver Simulator 3D aka com.oas.heavy.duty.truck.driver.simulator3d application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5716

The GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2global application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5743

The RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2global application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5716

The CVE-2014-5716 entry concerns the Android game GUNSHIP BATTLE : Helicopter 3D (package com.theonegames.gunshipbattle), version 1.1.7. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitiv...

CVE-2014-5743

CVE-2014-5743 affects the Android app RE-VOLT 2: Best RC 3D Racing (com.wego.revolt2_global) version 1.2.6. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate....

PT-2014-6728

Name of the Vulnerable Software and Affected Versions RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2 global version 1.2.6 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via...

PT-2014-6701

Name of the Vulnerable Software and Affected Versions GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle version 1.1.7 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...

CVE-2014-5743: Undefined Security Weakness

The RE-VOLT 2 : Best RC 3D Racing aka com.wego.revolt2global application 1.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5716: Undefined Security Weakness

The GUNSHIP BATTLE : Helicopter 3D aka com.theonegames.gunshipbattle application 1.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

VirtualBox 3D Acceleration Virtual Machine Escape

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Local Rank = AverageRanking DEVICE = '\\.\VBoxGuest'...

VirtualBox 3D Acceleration Virtual Machine Escape

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'VirtualBox 3D Acceleration Virtual Machine Escape', 'Description' = %q This module exploits a vulnerability in the 3D...

VirtualBox 3D Acceleration Virtual Machine Escape Exploit

This Metasploit module exploits a vulnerability in the 3D Acceleration support for VirtualBox. The vulnerability exists in the remote rendering of OpenGL-based 3D graphics. By sending a sequence of specially crafted of rendering messages, a virtual machine can exploit an out of bounds array acces...

Oracle VM VirtualBox 4.3.6 - 3D Acceleration Virtual Machine Escape (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'VirtualBox 3D Acceleration Virtual Machine Escape', 'Description' = %q This module exploits a vulnerability in the 3D...

VirtualBox 3D acceleration of virtual machine escape vulnerabilities in the advanced use-vulnerability warning-the black bar safety net

In the previous blog, we share a affect the Xen hypervisor client-to-host guest-to-host escape vulnerability the use of technology. In this new blog article we will focus on another VM escape vulnerability, VirtualBox the. A few months ago, our core security friends released a about the impact of...