PT-2017-14073

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient data validation in the Chromecast plugin, allowing a remote attacker to inject arbitrary scripts or HTML...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 63 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 63.0.3239.84 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

Google Chromecast Detection (TCP)

Binary data 700164.prm...

Google Chromecast Detection (UDP)

Binary data 700159.prm...

Chromecast Wifi Enumeration

This module enumerates wireless access points through Chromecast. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chromecast Wifi Enumeration', 'Description' = %q This module enumerates wireles...

Google to Launch 'Andromeda OS' — An Android-Chrome OS Hybrid

Google's long-rumored Android-Chrome hybrid operating system is expected to debut at the company's upcoming hardware event on October 4. The company has been working to merge the two OSes for roughly 3 years with a release planned for 2017, but an "early version" to show things off to the world i...

Stadt Land Fluss (Chromecast) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stadt Land Fluss Chromecast published at the 'play' market has multiple vulnerabilities...

BubbleUPnP for DLNA/Chromecast - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application BubbleUPnP for DLNA/Chromecast published at the 'play' market has multiple vulnerabilities...

Best apps for Chromecast - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Best apps for Chromecast published at the 'play' market has multiple vulnerabilities...

VEGA Cast (for Chromecast) - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application VEGA Cast for Chromecast published at the 'play' market has multiple vulnerabilities...

BrowserCast Video (Chromecast) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BrowserCast Video Chromecast published at the 'play' market has multiple vulnerabilities...

CastBox - Cast to Chromecast - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CastBox - Cast to Chromecast published at the 'play' market has multiple vulnerabilities...

Videostream Chromecast: Mobile - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Videostream Chromecast: Mobile published at the 'play' market has multiple vulnerabilities...

Video & TV Cast | Chromecast - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Video & TV Cast | Chromecast published at the 'play' market has multiple vulnerabilities...

ES Chromecast plugin - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application ES Chromecast plugin published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : Chromium (openSUSE-2016-109)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

openSUSE Security Update : Chromium (openSUSE-2016-99)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...

Security update for Chromium (important)

Chromium was updated to 48.0.2564.82 to fix security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-1612: Bad cast in V8 boo963184 - CVE-2016-1613: Use-after-free in PDFium boo963185 - CVE-2016-1614: Information leak in Blink boo963186 - CVE-2016-1615: Origin confusion in...