1156 matches found
CVE-2017-12612
In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...
CVE-2017-12612: Deserialization of Untrusted Data
In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...
Fedora Update for torbrowser-launcher FEDORA-2017-c535f23493
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for torbrowser-launcher FEDORA-2017-866fc566e0
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : torbrowser-launcher (2017-c535f23493)
Automatically refresh GPG keyring, to prevent signature verification false positives Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 25 : torbrowser-launcher (2017-866fc566e0)
Automatically refresh GPG keyring, to prevent signature verification false positives Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
[SECURITY] Fedora 25 Update: torbrowser-launcher-0.2.8-1.fc25
Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...
[SECURITY] Fedora 26 Update: torbrowser-launcher-0.2.8-1.fc26
Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...
Evie Launcher - BSD license, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Evie Launcher published at the 'play' market has multiple vulnerabilities...
FIN7 Evolution and the Phishing LNK
FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...
KakaoHome - launcher, theme - Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application KakaoHome - launcher, theme published at the 'play' market has multiple vulnerabilities...
Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection
!/usr/bin/env python2 import telnetlib import re import random import string Split string into chunks, of which each is /var/a' - 1 completed = temp = re.split'\n', script for content in temp: if lencontent != 0: for s in re.split' ', content: if ' ' in s: s = '\x20' if '\n' in s: s = '\n' else:...
Verizon to pre-install a 'Spyware' app on its Android phones to collect user data
If the death of online privacy rules wasn't enough for Internet Service Providers and advertisers to celebrate, Verizon has planned to pre-install spyware on customers' Android devices in order to collect their personal data. The telecom giant has partnered with Evie Launcher to bring a new...
Smart Launcher 3 - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Smart Launcher 3 published at the 'play' market has multiple vulnerabilities...
CVE-2017-5018
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page...
Tor Browser Launcher Man-in-the-Middle Attack Vulnerability
Tor Browser Launcher aka torbrowser-launcher is a set of tools for securely downloading, verifying, installing and launching the Tor Browser in Linux. A security vulnerability exists in versions of Tor Browser Launcher prior to 0.2.4. The vulnerability can be exploited by an attacker via a Trojan...
Code injection
Tor Browser Launcher aka torbrowser-launcher before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature...
CVE-2016-3180
Tor Browser Launcher aka torbrowser-launcher before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature...
CVE-2016-3180
Tor Browser Launcher aka torbrowser-launcher before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature...
DEBIAN-CVE-2016-3180
Tor Browser Launcher aka torbrowser-launcher before 0.2.4, during the initial run, allows man-in-the-middle attackers to bypass the PGP signature verification and execute arbitrary code via a Trojan horse tar file and a signature file with the valid tarball and signature...