Metal Logo Quiz - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Metal Logo Quiz published at the 'play' market has multiple vulnerabilities...

Drum kit metal - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Drum kit metal published at the 'play' market has multiple vulnerabilities...

Metal Soldiers - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Metal Soldiers published at the 'play' market has multiple vulnerabilities...

Metal Detector - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Metal Detector published at the 'play' market has multiple vulnerabilities...

Metal Style - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Metal Style published at the 'play' market has multiple vulnerabilities...

Metal for Facebook & Twitter - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Metal for Facebook & Twitter published at the 'play' market has multiple vulnerabilities...

metal.nightfall.fr XSS vulnerability

Vulnerable URL: http://metal.nightfall.fr/dformv3.php?orig=%22%3E%3Csvg%20onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

heavy-metal.com XSS vulnerability

Vulnerable URL: http://www.heavy-metal.com/?notfound=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.02.2016 Latest check for patch:| 22.02.2016 13:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

Important: Red Hat Security Advisory: openstack-ironic-discoverd security update

Updated openstack-ironic-discoverd packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

[SECURITY] Fedora 23 Update: openstack-ironic-discoverd-1.1.1-1.fc23

ironic-discoverd is a service for discovering hardware properties for a node managed by OpenStack Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduli ng from a bare metal node, given it's power management credentials e....

USN-2746-2 simplestreams regression

USN-2746-1 fixed a vulnerability in Simple Streams. The update caused a regression preventing MAAS from downloading PXE images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Simple Streams did not properly perform gpg...

металл-сервис.su XSS vulnerability

Vulnerable URL: http://металл-сервис.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2015 Latest check for patch:| 12.08.2015 00:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

Apple Mac OS X 10.11 'El Capitan' Update unveiled at WWDC 2015

After Google made its Android users happy by unveiling new features in Google I/O developer conference last month, it’s now time for Apple fans…WWDC 2015 event is upon us. Apple’s Worldwide Developers Conference is going on in San Francisco and the company has many new surprises for its users. On...

[SECURITY] Fedora 21 Update: docker-io-1.4.0-1.fc21

Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that will run virtually anywhere. Docker containers can encapsulate any payload, and will run consistently on and between virtually any server. The same container...

DEBIAN-CVE-2014-5270

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed...

UBUNTU-CVE-2014-5270

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed...

Abyssal Metal Player 2.0.9 - Denial of Service Vulnerability

No description provided by source. Exploit Title: Abyssal Metal Player 2.0.9 DoS Date: 23/08/2010 Author: 41.w4r10r Version: 2.0.9 Tested on : Windows XP SP2 Eng Software Link: http://www.abyssalsoft.com/files/download.php?id=15 !/usr/bin/python Abyssal Metal Player is Media File Player which Pla...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

CVE-2013-1069

Ubuntu Metal as a Service MaaS 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file...

CVE-2013-1070

The CVE-2013-1070 entry concerns Ubuntu MAAS (Metal as a Service) API XSS on the nodes/ op parameter in MAAS 1.2 and 1.4. The connected Ubuntu USN-2105-1 describes two issues: (1) a cross-site scripting vulnerability in the MAAS API that could allow an attacker to modify contents or steal data wi...