True Free Balance - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application True Free Balance published at the 'play' market has multiple vulnerabilities...

kernel: Use after free in array_map_alloc

Use after free vulnerability was found in percpu using previously allocated memory in bpf. First allocpercpugfp is called, then the memory is freed with freepercpu which triggers async pcpubalancework and then pcpuextendareamap could use a chunk after it has been freed...

kernel: Use after free in array_map_alloc

Use after free vulnerability was found in percpu using previously allocated memory in bpf. First allocpercpugfp is called, then the memory is freed with freepercpu which triggers async pcpubalancework and then pcpuextendareamap could use a chunk after it has been freed...

Logic design flaw vulnerability at DBSHOP_0.9.3_Beta /module/Shopfront/src/Shopfront/Controller/HomemoneyController.php

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta /module/Shopfront/src/Shopfront/Controller/HomemoneyController.php at the logical design flaws vulnerabilities. The vulnerability is caused due to the fact that when withdrawing money, the system...

Logic design flaw vulnerability at DBSHOP_0.9.3_Beta /module/Shopfront/src/Shopfront/Controller/CartController.php

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta /module/Shopfront/src/Shopfront/Controller/CartController.php at the logical design flaws vulnerability. When adding an order, it fails to determine the quantity of the product and directly...

FantasyTote: Urgent Fix Balance Limit bypass

Hi check this Video POC i am able to bypass the Limit of deposite balnce the limit is 150 but i can put 2000 https://drive.google.com/file/d/0B-HtZBO84sdSMkFEQ21vZW5Uak0/view Thanks Regards Tayyab Qadir...

Balance Ball - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Balance Ball published at the 'play' market has multiple vulnerabilities...

Balance Ball - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Balance Ball published at the 'play' market has multiple vulnerabilities...

Digital Detox, Balance & Focus - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Digital Detox, Balance & Focus published at the 'play' market has multiple vulnerabilities...

Tinnitus Balance - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tinnitus Balance published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21982: Email Messages Distributing Malicious Software on June 23, 2016

Medium Alert ID: 44362 First Published: 2016 March 30 17:08 GMT Last Updated: 2016 June 24 13:46 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21982 and...

Threat Outbreak Alert RuleID19858: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42500 First Published: 2015 December 7 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19858 may contain the following files: Name |...

equi-balance.co.uk XSS vulnerability

Vulnerable URL: http://www.equi-balance.co.uk/shop/basketnew.php?pagefile=" Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 16:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

Coinbase: Balance Manipulation - BUG

Hello once again, I have discovered another balance manipulation bug. This time it is much more simpler, but basically has the same outcome. EXPLANATION: When you create basic standard Vault and transfer money from your Main Wallet to the vault the balance doesn't "lock up", which means that even...

Threat Outbreak Alert RuleID17312: Email Messages Distributing Malicious Software on August 12, 2015

Medium Alert ID: 40418 First Published: 2015 August 12 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17312 may contain the following files: Name |...

Guest blog: PCI audits and how to recognize a good QSA auditor and partner

Many organizations approach a PCI audit with fear and trepidation. There are a lot of stories out there about how difficult, expensive and disruptive a PCI audit can be, but I want to see if I can add some balance to this view. I believe that when it comes to a PCI auditor it matters a great deal...

Paperlink Balance 710 Cross Site Request Forgery

​​ Affected software: paperlink balance 710 Type of vulnerability:csrf URL:peplink.com Discovered by: provensec Website: provensec.com version:710 Proof of concept​ a new manager can be added using csrf attack ​...

Little Change in Online Behavior Following Snowden Revelations

Some 30 percent of American adults say they have altered their digital behavior in the wake of Edward Snowden’s NSA spying revelations in order to hide information from the government. In Spring 2013, Snowden, a then NSA contractor working for Booz Allen Hamilton, remotely accessed the NSA’s Ft...

NetApp OnCommand Balance Privilege Control Vulnerability

NetApp OnCommand Balance is a NetApp solution that provides guidance on how to optimize the performance and capacity of virtual and physical data center infrastructures. A security vulnerability exists in NetApp OnCommand Balance prior to version 4.2P2 that stems from the inclusion of default...

Vulnerability in NetApp OnCommand Balance

NetApp OnCommand Balance is a NetApp solution that provides guidance on how to optimize the performance and capacity of virtual and physical data center infrastructures. A security vulnerability exists in NetApp OnCommand Balance versions prior to 4.2P3. An attacker could exploit the vulnerabilit...