The Untold History of America’s Zero-Day Market

The lucrative business of dealing in code vulnerabilities is central to espionage and war planning, which is why brokers never spoke about it—until now...

Debian DLA-2014-1 : vino security update

Several vulnerabilities have been identified in the VNC code of vino, a desktop sharing utility for the GNOME desktop environment. The vulnerabilities referenced below are issues that have originally been reported against Debian source package libvncserver. The vino source package in Debian ships...

SUSE-SU-2019:2868-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code can return filenames containing path separators bsc1144902. - CVE-2019-14833: Fixed Accen...

A proactive approach to more secure code

What if we could eliminate an entire class of vulnerabilities before they ever happened? Since 2004, the Microsoft Security Response Centre MSRC has triaged every reported Microsoft security vulnerability. From all that triage one astonishing fact sticks out: as Matt Miller discussed in his 2019...

Pentagon Expands Bug-Bounty Program to Include Physical Systems

The Department of Defense is expanding its “Hack the Pentagon” bug-bounty program to include hardware assets, tapping the Synack, HackerOne and Bugcrowd platforms to attract more white hats to the effort. The news comes two weeks after the Government Accountability Office GAO released a report...

SUSE-SU-2018:1998-1 Security update for mercurial

This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13346: Fix mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data bsc1100354. - CVE-2018-13347: Fix mpatch.c that mishandles integer...

Walkr: Fitness Space Adventure - Certificates or keys found, Exported ContentProvider, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Walkr: Fitness Space Adventure published at the 'play' market has multiple vulnerabilities...

Stickman Warriors - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Stickman Warriors published at the 'play' market has multiple vulnerabilities...

Christmas - Coloring Puzzles - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Christmas - Coloring Puzzles published at the 'play' market has multiple vulnerabilities...

Doctor Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Doctor Kids published at the 'play' market has multiple vulnerabilities...

Drummer Babies - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Drummer Babies published at the 'play' market has multiple vulnerabilities...

Toddlers Magic Flute - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Toddlers Magic Flute published at the 'play' market has multiple vulnerabilities...

Professional Xylophone - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Professional Xylophone published at the 'play' market has multiple vulnerabilities...

Pink Princess Nail Spa - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pink Princess Nail Spa published at the 'play' market has multiple vulnerabilities...

Early Learning: Sequences - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Early Learning: Sequences published at the 'play' market has multiple vulnerabilities...

Piggy Free Balloon Pop Bubbles - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Piggy Free Balloon Pop Bubbles published at the 'play' market has multiple vulnerabilities...

Coloring Shapes for Toddlers ! - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Coloring Shapes for Toddlers ! published at the 'play' market has multiple vulnerabilities...

Jewels Challenge - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Jewels Challenge published at the 'play' market has multiple vulnerabilities...

Birds Game for Toddlers Puzzle - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Birds Game for Toddlers Puzzle published at the 'play' market has multiple vulnerabilities...

Birds Best Games for Toddler - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Birds Best Games for Toddler published at the 'play' market has multiple vulnerabilities...