Compression Side-Channel Attack Framework: Rupture

A COMPRESSION SIDE-CHANNEL ATTACK FRAMEWORK Rupture is a framework for easily conducting BREACH and other compression-based attacks Rupture is a framework for conducting network attacks against web services. It is focused on compression-attacks, but provides a generalized scalable system for...

CamDAV - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application CamDAV published at the 'play' market has multiple vulnerabilities...

WarnWetter - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application WarnWetter published at the 'play' market has multiple vulnerabilities...

Juiker - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Juiker published at the 'play' market has multiple vulnerabilities...

AIX Java Advisory : java_april2016_advisory.asc (April 2016 CPU)

The version of Java SDK installed on the remote AIX host is affected by multiple vulnerabilities in the following components : - 2D - Deployment - Hotspot - JCE - JMX - JVM - ORB - SDK - Serialization %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Adobe Acrobat Reader DC JPEG2000 Out-of-Bounds Read Information Disclosure Vulnerability

Adobe Acrobat Reader DC is the United States of America Odooby Adobe company's set of tools for viewing, printing and annotating PDF. Adobe Acrobat Reader DC JPEG2000 has an out-of-bounds read information disclosure vulnerability due to the program failing to validate the value tag of the ihdr...

Google Fit - Fitness Tracking - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Google Fit - Fitness Tracking published at the 'play' market has multiple vulnerabilities...

Well Timed - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Well Timed published at the 'play' market has multiple vulnerabilities...

Apache Camel: source code security analysis report

Several vulnerabilities were discovered in The Apache Software Foundation 'Apache Camel' software: Using Synchronization Primitives in EJB components Missing Verification of Executable Files' Digital Signature when Executing them from Untrusted Sources Violating the Java Object Model Using...

USN-2955-1 oxide-qt vulnerabilities

A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. CVE-2016-1578 An out-of-bounds read...

Nail Salon 2 - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Nail Salon 2 published at the 'play' market has multiple vulnerabilities...

Oracle WebLogic Server Multiple Vulnerabilities (April 2016 CPU)

Binary data oracleweblogicservercpuapr2016.nbin...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0674

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

Code injection

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0674

The CVE-2016-0674 entry relates to Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core – Common Components (Email) vulnerability. The connected Nessus/CPU references indicate two related issues in 8.1.1/8.2.2: (1) Siebel UI Framework (UIF Open UI) and (2) Siebel Core – Common Componen...

CVE-2016-0688

CVE-2016-0688 is an unspecified vulnerability in Oracle WebLogic Server Core Components within Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3. The connected IBM bulletin classifies this CVE under the WebLogic Server Core Components entry and notes a CVSS base score of 7.5 with no confidentia...