SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:0625-1)

This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow flaw allowing a privileged user to crash the Qemu process on the host resulting in DoS bsc1023907. - CVE-2017-5857: The Virtio...

QEMU '/src/card_7816.c' Denial of Service Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU '/src/card7816.c'. An attacker can exploit this vulnerability to cause a QEMU instance to...

Good Night - In The Wood - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Good Night - In The Wood published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 25 Update: libcacard-2.5.3-1.fc25

This library provides emulation of smart cards to a virtual card reader running in a guest virtual machine. It implements DoD CAC standard with separate pki containers compatible coolkey, using certificates read from NSS...

How anyone could have used Uber to ride for free!

Note: This is being published with the permission of Uber under the responsible disclosure policy. The vulnerability was fixed in August 2016. Summary: This post is about an interesting bug on Uber which could have been used to ride for free anywhere in the world. Attackers could have misused thi...

Debian DLA-842-1 : qemu-kvm security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2017-2615 The Cirrus CLGD 54xx VGA Emulator in qemu-kvm is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in...

Instant Followers Pro+ - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Followers Pro+ published at the 'play' market has multiple vulnerabilities...

Покупки по акциям - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Покупки по акциям published at the 'play' market has multiple vulnerabilities...

Criminals Monetizing Attacks Against Unpatched WordPress Sites

Criminals have inevitably begun to attempt to monetize attacks against WordPress sites still vulnerable to a severe REST API endpoint vulnerability silently patched in the recent 4.7.2 security update. While more than one million websites have been defaced, researchers are now beginning to see so...

cirrus_bitblt_cputovideo does not check if memory region is safe

ISSUE DESCRIPTION In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo fails to check wethehr the specified memory region is safe. IMPACT A malicious guest administrator can cause an out of bounds memory write, very likely exploitable as a privilege escalation. VULNERABL...

CVE-2017-2368

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" component. It allows remote attackers to cause a denial of service application crash via a crafted contact card...

SMS Messaging (AOSP) - Exported ContentProvider, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS Messaging AOSP published at the 'play' market has multiple vulnerabilities...

SMS MMS Search for Tasker - Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS MMS Search for Tasker published at the 'play' market has multiple vulnerabilities...

Schedule SMS MMS EMAIL - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Schedule SMS MMS EMAIL published at the 'play' market has multiple vulnerabilities...

Voice SMS(MSS) - voice2voice - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Voice SMSMSS - voice2voice published at the 'play' market has multiple vulnerabilities...

Message Notification Lite - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Message Notification Lite published at the 'play' market has multiple vulnerabilities...

GO SMS Pro Message Counter - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GO SMS Pro Message Counter published at the 'play' market has multiple vulnerabilities...

Free Picture Messaging - External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Free Picture Messaging published at the 'play' market has multiple vulnerabilities...

SMS/MMS & Call Logs to Email - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SMS/MMS & Call Logs to Email published at the 'play' market has multiple vulnerabilities...

8anawat Arabic - External URLs, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 8anawat Arabic published at the 'play' market has multiple vulnerabilities...