Live Maps - Base64 encoded String, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Live Maps published at the 'play' market has multiple vulnerabilities...

Live Chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Live Chat published at the 'play' market has multiple vulnerabilities...

3D My Name Live Wallpaper - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 3D My Name Live Wallpaper published at the 'play' market has multiple vulnerabilities...

NBA LIVE Companion - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NBA LIVE Companion published at the 'play' market has multiple vulnerabilities...

Muzei Live Wallpaper - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Muzei Live Wallpaper published at the 'play' market has multiple vulnerabilities...

Tor: Use-after-free during XML transformations (MFSA-2016-27)

Hello, I'm not sure how to understand the rules regarding "Bonus over Base Bounty/Mozilla Bounty for code execution exploits". Are vulnerabilities affecting Firefox ESR 38.7 covered by this section? If yes, you may be interested by MFSA 2016-27 aka CVE-2016-1964:...

SUSE-SU-2016:0752-1 Security update for kernel live patch 2

This kernel live patch for Linux Kernel 3.12.51-60.25.1 fixes three security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2015-8660: The ovlsetattr function in fs/overlayfs/inode.c...

SUSE-SU-2016:0749-1 Security update for kernel live patch 10

This kernel live patch for Linux Kernel 3.12.51-52.34.1 fixes two security issues: Fixes: - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl...

SUSE-SU-2016:0747-1 Security update for kernel live patch 9

This kernel live patch for Linux Kernel 3.12.51-52.31.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c...

SUSE-SU-2016:0757-1 Security update for kernel live patch 8

This kernel live patch for Linux Kernel 3.12.48-52.27.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c...

SUSE-SU-2016:0753-1 Security update for kernel live patch 6

This kernel live patch for Linux Kernel 3.12.44-52.10.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c...

SUSE-SU-2016:0750-1 Security update for kernel live patch 5

This kernel live patch for Linux Kernel 3.12.43-52.6.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c ...

SUSE-SU-2016:0746-1 Security update for kernel live patch 4

This kernel live patch for Linux Kernel 3.12.39-47.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in...

SUSE-SU-2016:0745-1 Security update for kernel live patch 3

This kernel live patch for Linux Kernel 3.12.38-44.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in...

Swann SRNVW-470LCD and SWNVW-470CAM License Issue Vulnerability

The Swann SRNVW-470LCD and SWNVW-470CAM are both wireless HD surveillance systems from Swann Australia. An authorization issue vulnerability exists in the Swann SRNVW-470LCD and SWNVW-470CAM, which allows remote attackers to view live video streams by accessing an unspecified URL...

CVE-2015-8287

Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL...

Code injection

Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL...

CVE-2015-8287

Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL...

Swann SRNVW-470 allows unauthorized access to video stream and contains a hard-coded password

Overview Swann network video recorder NVR devices contain a hard-coded password and do not require authentication to view the video feed when accessing from specific URLs. Description CWE-259: Use of Hard-coded Password - CVE-2015-8286 According to the researcher, the Swann SRNVW-470LCD and Swann...

Disabled PadCrypt Ransomware Includes Live Chat, Uninstaller

Several flavors of ransomware, most notably Cryptowall, have come packaged with support features. But a new piece of crypto-ransomware called PadCrypt has upped the game with a live chat feature that victims can use to interact with the attackers about ransom payments and other information...