30 Day Extreme Squat Challenge - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Extreme Squat Challenge published at the 'play' market has multiple vulnerabilities...

30 Day Push Up Challenge - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Push Up Challenge published at the 'play' market has multiple vulnerabilities...

30 Day Cardio Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Cardio Challenge FREE published at the 'play' market has multiple vulnerabilities...

30 Day Back Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Back Challenge FREE published at the 'play' market has multiple vulnerabilities...

30 Day Plank Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Plank Challenge FREE published at the 'play' market has multiple vulnerabilities...

30 Day Arm Challenge FREE - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Arm Challenge FREE published at the 'play' market has multiple vulnerabilities...

30 Day Ab Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Ab Challenge FREE published at the 'play' market has multiple vulnerabilities...

Math Challenge - Brain Workout - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Math Challenge - Brain Workout published at the 'play' market has multiple vulnerabilities...

Bored With Chess? Here's How To Play Basketball in Facebook Messenger

Hope all of you have enjoyed the Game of Chess in the Facebook Messenger. But if you're quite bored playing Chess or not really good at the game, then you probably felt a bit excited about Facebook's recent inclusion of a little Basketball mini-game into Messenger. Now you can play Basketball...

DARPA Invites Geeks to Convert Everyday Objects into Deadly Weapons

Do you know that your daily household items can be turned into deadly weapons? Yes, it's possible to convert some of your everyday household appliances into explosives, weapons or surveillance devices. DARPA – the agency which does research in various fields for improving the US Military and US...

NHL Hat Trick Challenge - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NHL Hat Trick Challenge published at the 'play' market has multiple vulnerabilities...

British Intelligence is Legally Allowed to Hack Anyone, Court Says

Hacking of computers, smartphones and networks in the United Kingdom or abroad by the Government Communications Headquarters GCHQ is LEGAL, the UK's Investigatory Powers Tribunal IPT ruled. So, the UK is giving clean chit to its intelligence agency to spy on its people as well as people living...

How to Crack GCHQ Crypto Puzzle? — Here's the Solution

GCHQ has finally released the solution to their head spinning Xmas Puzzle, after all, the participants failed to reach the final answer. GCHQ had released a crypto puzzle, dubbed Xmas Puzzle, on 9th December in the form of a Christmas Card that went viral online soon after its release. Nearly...

Vulnerability acquisition platform Zerodium publication of various types of software and digital intrusion method price list-vulnerability warning-the black bar safety net

! 1 1 May 1 8, Zerodium（0day brokers published a variety of from a network of criminals to buy and then resell to the needs of the target software and intrusion methods of the price list. Vulnerabilities platform released a price list Zerodium CEO Chaouki bekrar has said: “0day trading the first...

StrongSwan Security Mechanism Bypass Vulnerability

strongSwan is an open source IPsec-based VPN solution for Linux. The server implementation of the EAP-MSCHAPv2 protocol in strongSwan's eap-mschapv2 plugin fails to properly validate the local state, allowing a remote attacker to bypass authentication by sending an empty Success message in respon...

DEBIAN-CVE-2015-8023

The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message...

UBUNTU-CVE-2015-8023

The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message...

CVE-2002-0639

Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication ChallengeResponseAuthentication when OpenSSH is using SKEY or BSDAUTH authentication...

Faraday 1.0.15 - Collaborative Penetration Test and Vulnerability Management Platform

A brand new version is ready for you to enjoy! Faraday v1.0.15 Community, Pro & Corp was published today with new exciting features. As a part of our constant commitment to the IT sec community we added a tool that runs several other tools to all IPs in a given list. This results in a major scan ...

[CVE-2015-4624] Predictable CSRF tokens in WiFi Pineapple firmware <= 2.3.0

Overview =============== WiFi Pineapples are a penetration testing tool used in offensive wireless activities. These devices run on a modified OpenWRT based on netBSD operating system. They include a web-based management interface. It has been discovered they have predictable anti-CSRF tokens bas...