Lucene search
+L

83 matches found

The Hacker News
The Hacker News
•added 2018/10/17 9:08 a.m.•5 views

Google Will Charge Android Phone Makers to Use Its Apps In Europe

Would you prefer purchasing an Android device that doesn't have any apps or services from Google? No Google Maps, No Gmail, No YouTube! And NOT even the Google Play Store—from where you could have installed any Android apps you want Because if you live in Europe, from now on, you have to spend so...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2018/07/18 1:06 p.m.•2 views

EU Fines Google Record $5 Billion in Android Antitrust Case

Google has been hit by a record-breaking $5 billion antitrust fine by the European Union regulators for abusing the dominance of its Android mobile operating system and thwarting competitors. That's the largest ever antitrust penalty. Though Android is an open-source and free operating system,...

6.7AI score
SaveExploits0
Filippo.io
Filippo.io
•added 2018/05/03 3:53 a.m.•27 views

Making a Gmail bot with Apps Script and TypeScript

Google Apps Script is one of the best hidden features of Gmail. Did you ever want just a bit more flexibility from a filter? Maybe the ability to remove a label, or match on a header, or just decide the order they are applied in. Apps Script can do all that and then some. They are simple JavaScri...

7.4AI score
SaveExploits0
Prion
Prion
•added 2018/01/31 2:29 p.m.•27 views

Design/Logic Flaw

The 'crowd-application' plugin module notably used by the Google Apps plugin in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given th...

4.9CVSS6.5AI score0.00566EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/01/31 2:29 p.m.•34 views

CVE-2017-16858

The 'crowd-application' plugin module notably used by the Google Apps plugin in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given th...

6.8CVSS6.5AI score0.00566EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/01/31 2:00 p.m.•38 views

CVE-2017-16858

The 'crowd-application' plugin module notably used by the Google Apps plugin in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given th...

6.5AI score0.00566EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/01/31 12:00 a.m.•3 views

PT-2018-6346

Name of the Vulnerable Software and Affected Versions: Atlassian Crowd versions 1.5.0 through 3.1.2 Description: The issue allows an attacker to impersonate a Crowd user in REST requests by authenticating to a directory bound to an application. This can occur when the Crowd application is bound t...

6.8CVSS0.00566EPSS
SaveExploits0References3
Atlassian
Atlassian
•added 2017/12/12 8:33 a.m.•70 views

REST endpoint user impersonation using authentication module functionality - CVE-2017-16858

The 'crowd-application' plugin module notably used by the Google Apps plugin in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given th...

6.8CVSS6.4AI score0.00566EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2017/12/12 8:33 a.m.•37 views

REST endpoint user impersonation using authentication module functionality - CVE-2017-16858

The 'crowd-application' plugin module notably used by the Google Apps plugin in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST requests by being able to authenticate to a directory bound to an application using the feature. Given th...

6.8CVSS1.8AI score0.00566EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2016/06/21 4:26 p.m.•13 views

Google Simplifies Two-Step Verification

Most major technology companies offer some take on two-factor authentication as an option for users to secure access to accounts and web-based services. Making users drink from that pond, however, has been a different story. Simplifying the process of using the second form of authentication, most...

7.5AI score
SaveExploits0References5
ThreatPost
ThreatPost
•added 2016/05/17 5:02 p.m.•23 views

Google Set to Kill SSLv3, RC4 in SMTP, Gmail in June

Google clarified this week exactly when it plans to disable support for the RC4 stream cipher and the SSLv3 protocol on the company’s SMTP servers and Gmail’s web servers. It turns out the end will come sooner than later; the company announced it will begin to disable both a month from now, on Ju...

7.1AI score
SaveExploits0References8
hackapp
hackapp
•added 2016/04/01 9:22 a.m.•12 views

Google Apps Device Policy - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Google Apps Device Policy published at the 'play' market has multiple vulnerabilities...

1.6AI score
SaveExploits0References1Affected Software1
myhack58
myhack58
•added 2015/10/15 12:00 a.m.•28 views

Google AdMob filter vulnerabilities, malicious ads sneak into the application-vulnerability warning-the black bar safety net

! There are Android app developers complained, because the official advertising network poorly regulated, resulting in this pollution-free Android application infected with malicious ads. Android app strange is implanted in the third-party advertising From Sydney, two bus the Android app Arrivo a...

0.2AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2015/04/29 12:14 p.m.•19 views

Google Releases Password Alert Extension for Chrome

Google is rolling out a new extension for Chrome that will monitor users’ logins and warn them if they enter a Google password on a non-Google page, a move designed to help protect users against phishing attacks. The new extension, called Password Alert, works for both consumer accounts and Googl...

7.2AI score
SaveExploits0References2
The Hacker News
The Hacker News
•added 2015/03/08 7:00 p.m.•17 views

Hacker Abuses Google Apps vulnerability for Sending Phishing Emails

A critical vulnerability has been discovered in the Google Apps for Work that allows hackers to abuse any website’s domain name based email addresses, which could then be used to send phishing emails on company’s behalf in order to target users. If you wish to have an email address named on your...

6.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2015/01/22 10:04 p.m.•26 views

Google Apps Flaw Allowed Hacker to Hijack Account and Disable Two-factor Authentication

A critical cross-site scripting XSS vulnerability in the Google Apps administrator console allowed cyber criminals to force a Google Apps admins to execute just about any request on the domain. The Google Apps admin console allows administrators to manage their organization’s account...

6.2AI score
SaveExploits0
Veeam
Veeam
•added 2014/12/08 12:00 a.m.•60 views

How to configure Email Notifications when using Gmail or Google Apps Mail

Solution Select the product below to be taken to the product-specific information for using Google Gmail to send email notifications. Veeam Backup & Replication v12 Veeam Backup & Replication v13 Veeam ONE v12 Veeam ONE v13 Veeam Backup for Microsoft 365 v7+ Veeam Agent for Microsoft Windows v6+...

6.5AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/06/11 1:07 p.m.•19 views

Google Patches Gmail Token Vulnerability

Google has patched a vulnerability that exposes an indefinite number of Gmail addresses, a potential gold mine for phishing and advanced attacks. Researcher Oren Hafif of Israel disclosed details on how he was able to abuse a token exposed in a URL in order to reveal every Gmail address. His work...

7.3AI score
SaveExploits0References3
ThreatPost
ThreatPost
•added 2013/08/07 2:07 p.m.•18 views

Google WebLogin Tokens Expose Google Apps, User Data

An exposure in the way Google handles authentication is an illustration of the unintended consequences of trading security for a little bit of convenience. Craig Young, a researcher from security company Tripwire, demonstrated at Def Con over the weekend how an Android single sign-on token known ...

7.4AI score
SaveExploits0References2
ThreatPost
ThreatPost
•added 2013/05/09 12:28 p.m.•35 views

How the Syrian Electronic Army Hacked the Onion

A pro-Syrian regime hacker collective known as the Syrian Electronic Army SEA recently compromised the Twitter, Google Apps and other accounts belonging to The Onion, a long-running satirical news publication in the U.S. Like The New York Times before it, The Onion published a fascinating...

0.1AI score
SaveExploits0References6
Rows per page
Query Builder