Microsoft Patches Windows Zero-Day Flaw Disclosed by Google

Microsoft was very upset with Google last week when its Threat Analysis Group publically disclosed a critical Windows kernel vulnerability CVE-2016-7255 that had yet to be patched. The company criticized Google's move, claiming that the disclosure of the vulnerability, which was being exploited i...

Microsoft Says Russian Hackers Using Unpatched Windows Bug Disclosed by Google

Google's Threat Analysis Group publically disclosed on Monday a critical zero-day vulnerability in most versions of Windows just 10 days after privately disclosed both zero days to Microsoft and Adobe. While Adobe rushed an emergency patch for its Flash Player software on October 26, Microsoft ha...

DNC Hacked, Research on Trump Stolen

Two separate APT groups believed to have ties to the Russian government have been fingered in attacks against the Democratic National Committee resulting in the theft of research done by the DNC on presumptive Republican nominee Donald Trump. Researchers at Crowdstrike, called in to investigate b...

Make Gummy Bear - Candy Maker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Make Gummy Bear - Candy Maker published at the 'play' market has multiple vulnerabilities...

Polar Bear Cub Free for kids - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Polar Bear Cub Free for kids published at the 'play' market has multiple vulnerabilities...

Honey Bear Jump 'n Run Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Honey Bear Jump 'n Run Game published at the 'play' market has multiple vulnerabilities...

Masha and the Bear - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Masha and the Bear published at the 'play' market has multiple vulnerabilities...

Arctic Polar Bear - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Arctic Polar Bear published at the 'play' market has multiple vulnerabilities...

PULL&BEAR - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application PULL&BEAR published at the 'play' market has multiple vulnerabilities...

Pink love Bear Theme - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Pink love Bear Theme published at the 'play' market has multiple vulnerabilities...

Mattel Fisher-Price Smart Toy Bear API Information Disclosure Vulnerability

The Mattel Fisher-Price Smart Toy Bear is a WiFi connected Internet of Things IOT smart toy bear. A security vulnerability in the API on the Mattel Fisher-Price Smart Toy Bear device allows remote attackers to exploit the vulnerability by submitting a special request to obtain sensitive informati...

Design/Logic Flaw

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

CVE-2015-8269

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

CVE-2015-8269

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

CVE-2015-8269

CVE-2015-8269 affects the Fisher-Price Smart Toy Bear API. Multiple sources confirm an improper authentication/authorization flaw in the device’s web service API that can be exploited by a nearby attacker in a Wi‑Fi network to obtain sensitive information or modify data, including names, birthdat...

PT-2016-3874

Name of the Vulnerable Software and Affected Versions Fisher-Price Smart Toy Bear affected versions not specified Description The issue allows remote attackers to obtain sensitive information or modify data on the Fisher-Price Smart Toy Bear devices. This can be achieved by leveraging presence in...

CVE-2015-8269: Improper Authentication

The API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive information or modify data by leveraging presence in an 802.11 network's coverage area and entering an account number...

search.brownbear.ru XSS vulnerability

Vulnerable URL: http://search.brownbear.ru/?q=xxxx%22%20autofocus%20onfocus=alert%28%22XSSPosed%22%29%20title=%22aaaa Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Eisbar SCADA Script Insertion

Document Title: =============== Eisbär SCADA All Versions - iOS, Android & W8 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID:...

Eisbär SCADA (All Versions) - Persistent UI Vulnerability

Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...