CVE-2016-1432

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

Threat Outbreak Alert RuleID23505: Email Messages Distributing Malicious Software on June 17, 2016

Medium Alert ID: 46737 First Published: 2016 June 17 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23505 and RuleID23505KVR may contain the followin...

H.I.S.バーチャルショップ - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application H.I.S.バーチャルショップ published at the 'play' market has multiple vulnerabilities...

iMedia Digital Signage - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application iMedia Digital Signage published at the 'play' market has multiple vulnerabilities...

ПриватТендер - External URLs, Redefined SSL Common Names verifier, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application ПриватТендер published at the 'play' market has multiple vulnerabilities...

Android Ransomware now targets your Smart TV, Too!

Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device? If your answer is yes, then you need to know the latest interest of the cyber criminals in the field of Internet of Things. Ransomware! After targeting hospitals, universities, and businesses, Ransomware has...

Android SD Card User Control Emulation Layer Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.SD Card Emulation Layer is one of the SD card user controls. An elevation of privilege vulnerability exists in the SD Card user control emulation layer of Android. A local attacker...

Rotten Apples: Apple-like Malicious Phishing Domains

At FireEye Labs we have an automated system designed to proactively detect newly registered malicious domains. This system observed some phishing domains registered in the first quarter of 2016 that were designed to appear as legitimate Apple domains. These phony Apple domains were involved in...

Windows Zero Day Selling for $90,000

Hackers claim to have unearthed a zero-day vulnerability giving attackers admin rights to any Windows machine from Windows 2000 to a fully patched version of Windows 10. The zero day is for sale on the black market for $90,000. Security experts say the zero-day exploit looks legitimate and in the...

cx-32wifi - Native code usage, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application cx-32wifi published at the 'play' market has multiple vulnerabilities...

rbscardservices.co.uk XSS vulnerability

Vulnerable URL: https://www.rbscardservices.co.uk/RBSGConsumer/UserStep1.do?promoCode=%22-prompt%28%27OPENBUGBOUNTY%27%29-%22 Details: Description| Value ---|--- Patched:| Yes, at 09.06.2016 Latest check for patch:| 09.06.2016 11:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Clal Insurance - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Clal Insurance published at the 'play' market has multiple vulnerabilities...

Fraudsters Stole ¥1.4 Billion from 1,400 Japanese ATMs in Just 3 Hours

In an era where major data hacks are on the rise, it is no surprise breaches on individuals are also up. In just three hours, over 100 criminals managed to steal ¥1.4 Billion approx. US$12.7 Million from around 1,400 ATMs placed in small convenience stores across Japan. The heist took place on Ma...

VCE Exam Simulator - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application VCE Exam Simulator published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID22906: Email Messages Distributing Malicious Software on May 18, 2016

Medium Alert ID: 46264 First Published: 2016 May 18 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22906 may contain the following files: Name | Size...

WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack

WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5 Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin chmod +x installer.sh ./installer.sh --install refer t...

Brick Classic HD - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Brick Classic HD published at the 'play' market has multiple vulnerabilities...

PayPal Deposit major vulnerability, 1 0 seconds no need to verify stolen brush Bank card within the amount-vulnerability warning-the black bar safety net

! Usually online often see Alipay stolen brush cases, but from their very far, did not expect this thing but in this day are happening in my body. The genuineness, without warning. Only 1 0 seconds, I did not receive any input the verification code or Payment password in the process, the Bank car...

Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation

----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://gameforge.com...

Windows Zero-Day Vulnerability, CVE-2 0 1 6-0 1 6 7: the attack Payment Card data-vulnerability warning-the black bar safety net

2 0 1 6 years 3 month, there has been a batch of economic motivation to the retail, Foodservice and hospitality industry as the target of the attack, these attacks, the message contains a large number of with embedded macros of the Microsoft Word document, once downloaded it will execute a named...