[Dexter] A Free Tool for Mobile (Android) Malware Analysis

Bluebox Labs just released Dexter, a free tool which wants to help information security professionals and malware analysts to analyze Android mobile applications in order to find malware and vulnerabilities. .png Dexter combines manual and automatic static program analysis to provide a better...

[DNSChef v0.2.1] DNS Proxy Relesead

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy aka “ Fake DNS “ is a tool used for application network traffic analysis among other uses. Changelog v0.2.1 It introduces IPv6 support, large number of new DNS record types, custom ports and other...

Nike+ Panel / Mobile App Cross Site Scripting

Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...

ME Mobile Application Manager 10 SQL Injection

Exploit for php platform in category web applications ME Mobile Application Manager v10 - SQL Vulnerabilities Introduction: ============= ManageEngine Mobile Applications Manager is a server and application performance monitoring software that helps businesses ensure high availability and...

Forget Epsilon, Fear the Angry Bird

No doubt you read about the huge email security breach Epsilon announced earlier this month. You may have received letters from companies that use Epsilon services about the possible loss of your email information. A lot of people are justifiably concerned that spear phishing and other nefarious...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

Week in Review: Mobile Madness, Firesheep Speaks Up, Myanmar Knocked Offline

The specter of politically motivated cyber attacks reared its head again this week, while closer to home, the names of two software giants: Google and Adobe were all over the headlines when it came to security this week, as several bugs were found…and fixed in the companies products. Read on for...

Microsoft Visual Basic 6.0 VBP Project File Handling Buffer Overflow (CVE-2007-4776)

Microsoft Visual Basic is a tool for productively building type-safe and object-oriented applications. It allows developers to create a wide range of Windows, Web, mobile and Office applications. Visual Basic VB is an event driven programming language and associated development environment from...