Port Scan v2.0 iOS - Command Inject Vulnerability

Port Scan version 2.0 suffers from a command injection vulnerability. Document Title: =============== Port Scan v2.0 iOS - Command Inject Vulnerability Product & Service Introduction: =============================== Port Scanning is a essential network utility for every IT professional and this i...

CVE-2015-6303

CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...

Siemens COMPAS移动应用的错误证书验证

No description provided by source...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to influence the integrity of information.

The vulnerability of the Oracle Business Intelligence Enterprise Edition mobile app software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of information...

CVE-2015-5717

The Siemens COMPAS Mobile application before 1.6 for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5717

The CVE-2015-5717 issue affects Siemens COMPAS Mobile application for Android (versions prior to 1.6). The root cause is improper verification of X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Public de...

Samsung smart Refrigerator presence of the vulnerability can lead to Gmail credentials theft-vulnerability warning-the black bar safety net

The recent Internet of things and new security issues, this time security researchers from the Samsung smart fridge to extract the Gmail authentication information. The middleman steal authentication At the recent DEFCON hacking conference, hackers have made a through the middle attack to steal t...

Google Unveils Smart, New OnHub Wi-Fi Router

Don't stare at the screen for too long for the buffering to end, Google has a solution! It seems like Google is buckling up to carve out a niche in the market of wireless smart network devices. Just few days after Google made itself a subsidiary and a separate venture under Alphabet Inc, it...

Mobile App: Improper validation of certificates within the iOS application

The ownCloud iOS Library was vulnerable against a remotely exploitable certification problem until version 1.1.2. The vulnerable library version is used by the official ownCloud iOS client until version 3.4.4. Specifically it has been discovered that the used networking library AFNetworking is pe...

Mobile App: Credentials potentially leaked to other configured ownCloud instance

A bug in the ownCloud iOS application below version 3.4.4 may leak credentials as well as cookies used for authentication purposes to other configured ownCloud instances. Specifically, the ownCloud iOS application allows users to connect to multiple ownCloud instances offering an easy way to swit...

Researchers Hack TrackingPoint Rifle's Precision Targeting System

TrackingPoint rifles are state-of-the-art precision hunting and sniper rifles that come equipped with a networked tracking scope that’s accessible via Wi-Fi, and comes complete with USB ports and a mobile app. It’s almost foolproof shooting, albeit at a $13,000 price tag. And the security of all ...

UDID+ 2.5 Command Injection

Document Title: =============== UDID+ v2.5 iOS - Mail Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1542 Release Date: ============= 2015-07-06 Vulnerability Laboratory ID VL-ID: ==================================== 1542...

Kankun Smart Socket / Mobile App Hardcoded AES Key

Hi List, Vulnerability ============= Hardcoded AES 256 bit key used in Kankun IoT/Smart socket and its mobile App Vulnerability Description ========================== The kankun smart socket device and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between th...

Grindr for iOS Edit Configuration Document Display Name Denial of Service Vulnerability

Grindr for iOS is GPS based mobile app. Grindr for iOS suffers from an input validation vulnerability in the handling of Display Name when editing configuration options, which allows remote attackers to exploit the vulnerability to inject multiple terminator strings and conduct denial of service...

Grindr Bug Bounty - Denial of Service Vulnerability

Document Title: =============== Grindr Bug Bounty - Denial of Service Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1490 Video: https://www.youtube.com/watch?v=tqc5IacqXA Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID:...

Grindr v2.1.1 iOS - (eMail) Session Vulnerability

Document Title: =============== Grindr v2.1.1 iOS - eMail Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1426 Release Date: ============= 2015-05-03 Vulnerability Laboratory ID VL-ID: ==================================== 1426 Commo...

Grindr 2.1.1 iOS Bug Bounty #2 - DoS Software Vulnerability

Document Title: =============== Grindr 2.1.1 iOS Bug Bounty 2 - DoS Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1418 Release Date: ============= 2015-05-02 Vulnerability Laboratory ID VL-ID: ====================================...

Visa Wants To Track Your Smartphone to Prevent Credit Card Fraud

If you are a traveler and loves to travel then you must be annoyed of those calls you sometimes get from your bank when buying things far from home, and the most annoyed part is when the company won't approve the transaction as it fears your card was stolen. VISA MOBILE LOCATION CONFIRMATION APP...

BMW security vulnerability details: the ancient Bole to identify a good horse, today there are hackers escapement BMW-vulnerability warning-the black bar safety net

ADAC whole German automobile club want to in-depth understanding of embedded mobile network modem of the car to the manufacturer to send data. C't German computer technology magazine for the ADAC introduced a security expert. The expert in-depth analysis of the BMW ConnectedDrive system the data...

17-Year-Old Found Bugs in WhatsApp Web and Mobile App

Last week, the most popular mobile messaging application WhatsApp finally arrived on the web — dubbed WhatsApp Web, but unfortunately it needs some improvements in its web version. An independent 17-year-old security researcher Indrajeet Bhuyan reported two security holes in the WhatsApp web clie...