RC Monster Truck - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RC Monster Truck published at the 'play' market has multiple vulnerabilities...

RC Car Hill Racing Simulator - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RC Car Hill Racing Simulator published at the 'play' market has multiple vulnerabilities...

Absolute RC Player - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Absolute RC Player published at the 'play' market has multiple vulnerabilities...

RC-Race-Shop.de - Certificates or keys found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application RC-Race-Shop.de published at the 'play' market has multiple vulnerabilities...

Apple OS X Server Web Server Unauthorized Operation Vulnerability

Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software can realize file sharing, meeting arrangement, website hosting, network remote access, etc. Web Server is one of the Web servers. A security vulnerability exists in Apple OS X Server...

Opera 12 and Opera Mail security update

Security Opera 12 and Opera Mail security update Share February 16th, 2016 We realize that those of you on old operating systems like Windows XP SP1 and older are left without much choice beyond using our Presto-based browser. With security standards on the web changing so much we didn’t want to...

rc-lubersac.com XSS vulnerability

Vulnerable URL: http://www.rc-lubersac.com//search/site/?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

USN-2696-1 openjdk-7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732,...

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

PPP 'rc_mksid()' Function Remote Buffer Overflow Vulnerability

The Point-to-Point Protocol PPP provides a standardized method for transmitting multiprotocol packets over point-to-point connections. A remote buffer overflow vulnerability exists in the PPP 'rcmksid' function due to the program failing to properly filter user-supplied data. An attacker is allow...

CVE-2014-9528

SQL injection vulnerability in the actionIndex function in protected/modulescore/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the from parameter to index.php. NOTE: this can be leveraged for...

Sql injection

SQL injection vulnerability in the actionIndex function in protected/modulescore/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the from parameter to index.php. NOTE: this can be leveraged for...

CVE-2014-7689

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7689

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7689

The CVE-2014-7689 entry corresponds to the Android app “The GzoneRC - The RC Hobby Hub (com.wGzoneRC)” version 0.1, where the app does not verify X.509 certificates when connecting to SSL servers. This behavior can allow a man‑in‑the‑middle attacker to spoof servers and access sensitive informati...

CVE-2014-7689: Undefined Security Weakness

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7759: Undefined Security Weakness

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7054

Summary of CVE-2014-7054 : The Android app musica de barrios sonideros (package com.nobexinc.wls_93155702.rc), version 3.3.10, does not verify X.509 certificates when connecting to SSL servers. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...