50 matches found
SUSE CVE-2015-1182
The asn1getsequenceof function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1sequence linked list, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted...
Polar Flow Android 5.7.1 Secret Disclosure Vulnerability
Insecure data storage in Polar Flow Android application Overview Advisory ID: TRSA-2110-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2110-01 Affected product: Polar Flow Android mobile application fi.polar.polarflow Affected version: 5.7.1...
Polar Flow Android 5.7.1 Secret Disclosure
Trovent Security Advisory 2110-01 Insecure data storage in Polar Flow Android application Overview Advisory ID: TRSA-2110-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2110-01 Affected product: Polar Flow Android mobile application...
support.polar.com Cross Site Scripting vulnerability OBB-2274439
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
polar-france.com Cross Site Scripting vulnerability OBB-1204929
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
polar-france.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180789 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Unauthorized Access Vulnerability in Polar Internal Control Fortress Host System
Polar Internal Control Bastion Host System is an important part of Polar Security Internal Control Solution, which is deployed in the internal network of the enterprise to protect the access security of the core resources within the enterprise. There is an unauthorized access vulnerability in the...
A History of Plans to Nuke Hurricanes (and Other Stuff Too)
If you think dropping a nuclear bomb into the eye of a hurricane is a bad idea, wait'll you see what they had in mind for the polar ice caps...
Polar fitness app exposed location data of users in military & airbases
By Waqas Polar Flow, an app developed by Polar, a Finland based sports This is a post from HackRead.com Read the original post: Polar fitness app exposed location data of users in military & airbases...
Polar Fitness App Exposes Location of ‘Spies’ and Military Personnel
Fitness device maker Polar Flow suspended an Explore tracking feature on its mobile app after researchers discovered profile and geolocation data of high-ranking military personnel and “spies” that were being exposed to the public on its network. In a report released by Dutch publication De...
Satellite Tracking Application: Gpredict
Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...
polar.com XSS vulnerability
Open Bug Bounty ID: OBB-595893 Description| Value ---|--- Affected Website:| polar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
polar.com XSS vulnerability
Open Bug Bounty ID: OBB-509615 Description| Value ---|--- Affected Website:| polar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Polar Bear Cub Free for kids - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Polar Bear Cub Free for kids published at the 'play' market has multiple vulnerabilities...
Polar Penguin Run - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Polar Penguin Run published at the 'play' market has multiple vulnerabilities...
Arctic Polar Bear - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Arctic Polar Bear published at the 'play' market has multiple vulnerabilities...
Polar Beat - Fitness Coach - Customized SSL, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Polar Beat - Fitness Coach published at the 'play' market has multiple vulnerabilities...
Polar Flow - Activity & Sports - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Polar Flow - Activity & Sports published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2015-5291
Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS formerly PolarSSL 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service client crash and possibly execute arbitrary code via a long hostname to the server name indication SNI...
Eisbar SCADA Script Insertion
Document Title: =============== Eisbär SCADA All Versions - iOS, Android & W8 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID:...