CVE-2014-6765

The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6765

The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6765

The CVE-2014-6765 entry concerns the Android app No Fuss Home Loans (com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7) version 1.0035.b0035, which does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted cert...

Home Hacking Made Simple

SEATTLE–Like most security researchers, David Jacoby is naturally curious about how things work, and whether they can be made to do things they weren’t meant to do. Sitting at home in Sweden a few months ago, he looked at all of the Web-enabled devices in his house–TV, game console, network stora...

David Jacoby on Hacking His Home

Dennis Fisher talks with David Jacoby of Kaspersky Lab about the research he did on the security of electronics gear in his home, including his smart TV, game console and storage devices, and what the vendors need to do to respond.​ Download: digitalunderground168.mp3 Music by Chris Gonsalves...

Dennis Fisher and Mike Mimoso Discuss All Things Apple Security, Home Depot and Microsoft

Dennis Fisher and Mike Mimoso talk abut the crazy news of the last couple of weeks, the Apple privacy and Apple Pay announcements, the details of the Home Depot breach and the end of the Microsoft Trustworthy Computing unit. Download: digitalunderground167.mp3 Music by Chris Gonsalves...

'The Home Depot' Data Breach Put 56 Million Payment Cards at Risk

Home Depot, the nation’s largest home improvement retailer, announced on Thursday that a total of 56 million unique payment cards were likely compromised in a data breach at its stores, suggesting that the data breach on Home improvement chain was larger than the Target data breach that occurred...

Home Depot Data Breach Put 56 Million Cards at Risk

Home Depot confirmed this afternoon that the breach of its systems put approximately 56 million unique payment cards at risk, considerably more than the Target data breach. The giant home retailer disclosed on Sept. 2 that hackers had been on its network since April; by comparison, the Target...

CVE-2014-4361

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

Design/Logic Flaw

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

CVE-2014-4361

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app...

CVE-2014-4361

CVE-2014-4361 affects the Home & Lock Screen subsystem in Apple iOS before 8, where the private API used to determine the frontmost app lacked sufficient access control. Exploitation would allow a crafted background app to reveal which app is frontmost. The issue is described as a lack of proper ...

SNMP DDoS Attack Spoofs Google DNS Server

Update: The SANS Internet Storm Center this afternoon reported SNMP scans spoofed from Google’s public recursive DNS server seeking to overwhelm vulnerable routers and other devices that support the protocol with DDoS traffic. “The traffic is spoofed, and claims to come from Google’s DNS server...

Design/Logic Flaw

The Home Repair aka com.gcspublishing.houserepairtalk application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5630

The Home Repair Android app (package com.gcspublishing.houserepairtalk) version 3.7.9 does not verify X.509 certificates from SSL servers. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: lack of TLS certificate vali...

Home Depot Data Breach Confirmed

Home Depot today finally confirmed that its payment systems have been breached, but a number of crucial questions remain unanswered by the giant home improvement retailer. In a statement released late this afternoon, Home Depot said customers using payment cards at its U.S. and Canada locations,...

WordPress Like Dislike Counter 1.2.3 SQL Injection

Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND plugins/pro-like-dislike-counter/ldc-ajax-counter.php Plugin Version : 1.2.3...

Dennis Fisher and Mike Mimoso Discuss the Apple iCloud Mess, Potential Home Depot Breach

Dennis Fisher and Mike Mimoso discuss the Apple iCloud mess, why the company waited until now to extend its 2FA system to the cloud, and the fallout from the possible Home Depot data breach. Download: digitalunderground165.mp3 Music by Chris Gonsalves...

Home Depot Data Breach Prompts Look at Backoff PoS Malware

Naturally, early speculation on the malware culprit behind the possible Home Depot data breach has leaned toward Backoff. The point-of-sale malware, one of many used against payment terminals, has recently been blamed for more than 1,000 attacks on businesses, prompting the U.S. Secret Service to...