Vulnerability of Adobe Reader software, which allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability in Adobe Reader allows attackers to bypass the sandbox protection mechanism and execute native code in a privileged context...

Vulnerability of Adobe Reader software, which allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability in Adobe Reader for Windows allows attackers to bypass the sandbox protection mechanism and execute native code in a privileged context...

The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Acrobat allows attackers to bypass the sandbox protection mechanism and execute native code in a privileged context...

Starlink - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Starlink published at the 'play' market has multiple vulnerabilities...

Patrick Wardle on macOS Gatekeeper, Crypto Enhancements

At last week’s Apple Worldwide Developer Conference, Apple announced some security upgrades around Gatekeeper and a new filesystem that includes native support for encryption. Mac hacker Patrick Wardle, director of research at Synack, explains whether this a big deal and how the upgrades address...

Native applications with OAuth 2

By Justin Richer and Antonio Sanso This article was excerpted from the book OAuth 2 in Action. The OAuth core specification specifies four different grant types: Authorization Code, Implicit, Resource Owner Password Credentials and Client Credentials. Each grant type is designed with different...

H.I.S.バーチャルショップ - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application H.I.S.バーチャルショップ published at the 'play' market has multiple vulnerabilities...

BabyBus World - Games for kids - Exported components, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application BabyBus World - Games for kids published at the 'play' market has multiple vulnerabilities...

Takli LDjaj - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Takli LDjaj published at the 'play' market has multiple vulnerabilities...

cx-32wifi - Native code usage, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application cx-32wifi published at the 'play' market has multiple vulnerabilities...

Money transfers - External URLs, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Money transfers published at the 'play' market has multiple vulnerabilities...

VCE Exam Simulator - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application VCE Exam Simulator published at the 'play' market has multiple vulnerabilities...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update

Red Hat JBoss Web Server 3.0.3 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update

Red Hat JBoss Web Server 3.0.3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Adobe Flash - SetNative Use-After-Free

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=800 There is a use-after-free in SetNative. If a watch is placed on a native that is initialized by SetNative, it can delete the object the set is being called on, leading to a...

Generate TCP/UDP Outbound Traffic On Multiple Ports

This module generates TCP or UDP traffic across a sequence of ports, and is useful for finding firewall holes and egress filtering. It only generates traffic on the port range you specify. It is up to you to run a responder or packet capture tool on a remote endpoint to determine which ports are...

SOL93600123 - OpenSSL vulnerability CVE-2016-2107

2 IPsec is vulnerable only in phase 1 IKE racoon, if configured to use AES-CBC. Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be no...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a maintenance failure or execute arbitrary code.

The vulnerability in the hw/ide/ahci.c driver of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code crash due to an incorrect AHCI Native Command Queuin...

Ubuntu 15.10 : php5 regression (USN-2952-2)

USN-2952-1 fixed vulnerabilities in PHP. One of the backported patches caused a regression in the PHP Soap client. This update fixes the problem. We apologize for the inconvenience. It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A...

Windows/x86 .Net Framework - Execute Native x86 Shellcode

Exploit Title: .Net framework execute native x86 shellcode Date: May. 2nd 2016 Exploit Author: Jacky5112 Software Link: https://github.com/jacky5112/ShellCodeTestVersion1.0 Version: 1.0 Tested on: Windows CVE : none...