Saving user accounts can sometimes grant the user all roles

More info at https://www.drupal.org/SA-CORE-2016-002...

Child Porn Suspect Held in Jail for 7 Months for refusing to Decrypt Hard Drives

In Brief A suspect of child pornography possession, Francis Rawls, who is a former Philadelphia Police Department sergeant, has been in solitary confinement without charges for last seven months and will remain until he complies with a court order forcing him to decrypt his password-protected har...

Mr. Know It All - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mr. Know It All published at the 'play' market has multiple vulnerabilities...

NBA All Net - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application NBA All Net published at the 'play' market has multiple vulnerabilities...

All Star Quarterback - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application All Star Quarterback published at the 'play' market has multiple vulnerabilities...

Flyff All Stars - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flyff All Stars published at the 'play' market has multiple vulnerabilities...

Uno For All - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Uno For All published at the 'play' market has multiple vulnerabilities...

PlayStation® All-Stars Island - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application PlayStation® All-Stars Island published at the 'play' market has multiple vulnerabilities...

All-In-One Toolbox (Cleaner) - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application All-In-One Toolbox Cleaner published at the 'play' market has multiple vulnerabilities...

All Cars - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application All Cars published at the 'play' market has multiple vulnerabilities...

Apple, Google Faced All Writs Act Orders

The American Civil Liberties Union has dug up more proof that from the get-go the FBI’s attempt to crack open an iPhone used by the San Bernardino shooter Syed Rizwan Farook was not just about the one phone. The ACLU found court documents and on Wednesday published an interactive map visualizing...

Google has also been Ordered to Unlock 9 Android Phones

The legal battle between Apple and the FBI Federal Bureau of Investigation over a locked iPhone that belonged to one of the San Bernardino shooters may be over, but the Department of Justice DoJ are back in front of a judge with a similar request. The American Civil Liberties Union ACLU has...

WordPress WP All 3.2.3 文件上传漏洞

No description provided by source...

Uber: Stored XSS in drive.uber.com WordPress admin panel

There is another bug in the All In One Event Calendar plugin used on drive.uber.com. An attacker can inject arbitrary JavaScript in the administrative Dashboard of WordPress. The script would be evaluated under administrator privileges as only logged-in administrators can view the Dashboard. Such...

FBI may have found a New Way to Unlock Shooter's iPhone without Apple

There's more coming to the high-profile Apple vs. FBI case. The Federal Bureau of Investigation FBI might not need Apple's assistance to unlock iPhone 5C that belonged to San Bernardino shooter, Syed Rizwan Farook. If you have followed the San Bernardino case closely, you probably know everything...

Apple Counters FBI's Backdoor Demand as Unconstitutional

Apple has matched the Department of Justice’s recent vitriol, by this week calling the FBI’s request for code to help it unlock Syed Farook’s iPhone unconstitutional. Furthermore, Apple in a court filing this week again challenged the validity of the government’s use of the All Writs Act of 1789 ...

Clarke: Precedent-Seeking FBI Won't Ask NSA to Unlock Phone

The National Security Agency’s silence in the Apple-FBI story is probably not so surprising. But that hasn’t stopped people from dragging the NSA’s name into the conversation. The latest to do so is Richard Clarke, former counterterrorism chair under presidents George H.W. Bush and Bill Clinton...

DOJ Calls Apple's Rhetoric 'Corrosive' and 'False'

The Justice Department took off the gloves in its latest volley against Apple and its refusal to comply with a court order to unlock a terrorist’s iPhone. “Apple deliberately raised technological barriers that now stand between a lawful warrant and an iPhone containing evidence related to the...

Crypto Panel Experts Clash on FBI-Apple Debate

SAN FRANCISCO—One would think that six of the smartest security people on the planet could come to some sort of collective conclusion on the FBI-Apple debate. But that wasn’t the case today during the annual Cryptographers’ Panel at RSA Conference. The debate over whether Apple should assist the...

New York Judge Rules FBI Can't Force Apple to Unlock iPhone

Apple - 1; The FBI - 0 Apple Won a major court victory against the Federal Bureau of Investigation FBI in an ongoing legal battle similar to San Bernardino. In a New York case, a federal magistrate judge has ruled in favor of Apple, rejecting the U.S. government’s request to force Apple to help...