DEBIAN-CVE-2017-7867

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...

Why You Need a Database Audit Trail

Your ability to answer very detailed questions about what’s going on in your organization’s databases can make or break a compliance audit or security investigation. Aside from the obvious need for this information in the event of a breach, it’s also important because government, financial, and...

Orbot: Proxy with Tor - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Orbot: Proxy with Tor published at the 'play' market has multiple vulnerabilities...

Stack overflow

Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9...

CVE-2016-4459

Stack-based buffer overflow in native/modmanager/node.c in modcluster 1.2.9...

VR Space: The Last Mission - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application VR Space: The Last Mission published at the 'play' market has multiple vulnerabilities...

Ooredoo TV - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Ooredoo TV published at the 'play' market has multiple vulnerabilities...

eDAT ACCESS App - External URLs, Native code usage, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application eDAT ACCESS App published at the 'play' market has multiple vulnerabilities...

VNC Viewer - Remote Desktop - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application VNC Viewer - Remote Desktop published at the 'play' market has multiple vulnerabilities...

CVE-2016-6809

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...

CVE-2016-6809

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...

CVE-2016-6809

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...

CVE-2016-6809

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization...

e-Actinver - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application e-Actinver published at the 'play' market has multiple vulnerabilities...

EaST - Exploits and Security Tools Framework

Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and proactive protection. The need of native comprehensive open source pen test framework with high level...

Security Bypass Vulnerabilities in Multiple Game Engine Products

ioquake3 and others are open source, free, cross-platform Quake 3-based FPS game engines. A security vulnerability exists in the auto-downloading feature in several game engine products, which stems from the program's failure to adequately restrict content. An attacker can exploit the vulnerabili...

Fox Digital Copy (Beta) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Fox Digital Copy Beta published at the 'play' market has multiple vulnerabilities...

RootBeer Sample - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application RootBeer Sample published at the 'play' market has multiple vulnerabilities...

Dr. Panda Restaurant Asia - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Panda Restaurant Asia published at the 'play' market has multiple vulnerabilities...

Safari Browser: Builtin JavaScript allows Function.caller to be used in strict mode(CVE-2017-2446)

If a builtin script in webkit is in strict mode, but then calls a function that is not strict, this function is allowed to call the Function. caller and can obtain a reference to the strict function. This is inconsistent with the behavior when executing non-builtin scripts in Safari, and the...