ÖBB Rail&Drive - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ÖBB Rail&Drive published at the 'play' market has multiple vulnerabilities...

book-n-drive - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application book-n-drive published at the 'play' market has multiple vulnerabilities...

Receiver for Chrome Error: Invalid command line arguments: Unable to open the file as it has an unsupported extension

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When a user attempts to open a file directly from Google Drive, they may receive the following error...

Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2

Cluster service fails when shutting down or data deduplication fails with "Drive is locked" in Windows Server 2012 R2 This article describes two issues that are addressed in this update: the cluster service fails when it's being shut down and data deduplication fails with the "This drive is locke...

Network drives aren't mapped correctly from DFS namespace in Windows Server 2012 R2-based RDS server

Network drives aren't mapped correctly from DFS namespace in Windows Server 2012 R2-based RDS server This article describes an issue that occurs on a Windows Server 2012 R2-based computer that has the Remote Desktop Services RDS role installed. You can fix this issue by using the update in this...

A computer stops responding during shutdown if BitLocker is enabled on the system drive on a computer that is running Windows 7 or Windows Server 2008 R2

A computer stops responding during shutdown if BitLocker is enabled on the system drive on a computer that is running Windows 7 or Windows Server 2008 R2 Not sure if this is the right fix? We've added this issue to our memory dump diagnostic which can confirm. Symptoms Assume that you enable...

A text message to let the other iPhone's Message app crashes(attached to the PoC and solution)-vulnerability warning-the black bar safety net

! The researchers said they found a can let the iPhone device, the Message application crash message, affecting iOS8-iOS 10.2.1 it. First look at the demo. Do not try so do it! If you want to test your iPhone at your own risk 1.下载文件vincedes3.com/vincedes3.vcf 2. Upload to iCloud Drive, Dropbox,...

iOS 10 iMessage character crash Bug again-vulnerability warning-the black bar safety net

! Recently, hacker@vincedes3 found a from iOS 8 to iOS 10.2.1 b2 universal iMessage character crash Bug, the Bug also utilizes the iOS 8 iMessage SMS Bug of a similar technique, a section of malicious code sent to the victims, the victims in receiving SMS, browse SMS can be caught, then the SMS...

Google Chrome + Fedora 25 / Ubuntu 16.04 - tracker-extract / gnome-video-thumbnailer + totem Drive-B

Exploit for linux platform in category local exploits Overview Full reliable 0day drive-by exploit against Fedora 25 + Google Chrome, by breaking out of Super Nintendo Entertainment System emulation via cascading side effects from a subtle and interesting emulation error. I had a lot of fun...

My Drive UAE - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Drive UAE published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

PT-2016-7137

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue in Open-Xchange OX App Suite allows script code within SVG files to be maintained when opening such files in browser, based on the Mail or Drive app. This can lead to...

Security Advisory - Stack Overflow Vulnerability in Drive of Huawei Smart Phones

There is a stack overflow vulnerabilities in touchscreen drive of some Huawei Smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to touchscreen drive to crash the system or escalate privilege Vulnerability ID:...

CVE-2016-6844: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

Google Chrome (Fedora 25 Ubuntu 16.04) - tracker-extract gnome-video-thumbnailer + totem Drive-By Download

Google Chrome Fedora 25 Ubuntu 16.04 - tracker-extract gnome-video-thumbnailer + totem Drive-By Download Source: https://scarybeastsecurity.blogspot.com/2016/12/redux-compromising-linux-using-snes.html Overview Full reliable 0day drive-by exploit against Fedora 25 + Google Chrome, by breaking out...

Google Chrome (Fedora 25 / Ubuntu 16.04) - 'tracker-extract' / 'gnome-video-thumbnailer' + 'totem' Drive-By Download

Source: https://scarybeastsecurity.blogspot.com/2016/12/redux-compromising-linux-using-snes.html Overview Full reliable 0day drive-by exploit against Fedora 25 + Google Chrome, by breaking out of Super Nintendo Entertainment System emulation via cascading side effects from a subtle and interestin...

Cumulative Update for Windows 10 Version 1607 and Windows Server 2016: December 9, 2016

None None...

Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH)

Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow SEH !/usr/bin/python Open the DupScout client and click on Tools click on Connect Network Drive type the content of boom.txt in the "User Name" field. The payload is sent to the DupScout server port 9126 SEH based stack overflow in DupScout...

Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH)

!/usr/bin/python Open the DupScout client and click on Tools click on Connect Network Drive type the content of boom.txt in the "User Name" field. The payload is sent to the DupScout server port 9126 SEH based stack overflow in DupScout server Tested in Windows 7 Professional For educational...

Press Shift + F10 during Windows 10 Upgrade to Launch Root CLI & bypass BitLocker

If your computer's security relies on Windows BitLocker Hard Drive Encryption software, then Beware! Because anyone with physical access to your PC can still access your files within few seconds. All an attacker need to do is hold SHIFT+F10 during Windows 10 update procedure. Security researcher...