One Million Access Facebook Over Tor

Accessing Facebook over Tor may seem to be a contradiction, but apparently that’s not the case for a million or so users of the anonymity service. Facebook on Friday said that in April, for the first time, there were more than one million people accessing Facebook over Tor in a 30-day period. As ...

QIWI: SSL Certificate on qiwi.com will expire soon.

The validity of the SSL certificate is about to expire on 15 may 2016. The browser will normally present the user with a warning message indicating that the certificate has expired. These warnings are extremely confusing for the typical web user, and cause most users to question the authenticity ...

Man-in-the-Middle (MitM)

electron-packager is vulnerable to man-in-the-middle MitM attacks. The application by default sets the --strict-ssl variable to false, disabling SSL certificate validation. This can allow an attacker on an adjacent network to conduct a MitM attack during the electron package installation step...

CVE-2013-7449

The ssldoconnect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Photopt App fails to verify SSL server certificates

Overview Photopt App provided by NTT Communications Corporation fails to verify SSL server certificates. Yuto Iso reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may allow an...

Security Advisory - Vulnerability of No SSL Certificate Validation in Huawei Wear App and Hilink APP

A vulnerability of no SSL certificate validation exists in Huawei Wear APP and Hilink APP. These APPs still load the web page when accessing a website whose SSL certificate has issues, which brings risks to users. Vulnerability ID: HWPSIRT-2016-03008 This vulnerability has been assigned a Common...

How Do I Set Up RSA Keys/Public SSL Certificate on Citrix ADC

...

What is Certificate Transparency? How It helps Detect Fake SSL Certificates

Do you know there is a huge encryption backdoor still exists on the Internet that most people don't know about? I am talking about the traditional Digital Certificate Management System… the weakest link, which is completely based on trust, and it has already been broken several times. To ensure t...

WordPress enables Free HTTPS Encryption for all Blogs with Custom Domain

Do you own a custom domain or a blog under the wordpress.com domain name? If yes, then there is good news for you. WordPress is bringing free HTTPS to every blog and website that belongs to them in an effort to make the Web more secure. WordPress – free, open source and the most popular a content...

Ubuntu 14.04 LTS : XChat-GNOME vulnerability (USN-2945-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2945-1 advisory. It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's...

USN-2945-1: XChat-GNOME vulnerability

It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, which was signed by a trusted certificate authority, to perform a machine-in-the-middle attack...

Math learn to add and subtract - Customized SSL, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Math learn to add and subtract published at the 'play' market has multiple vulnerabilities...

Furious Sicilian Vendetta - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Furious Sicilian Vendetta published at the 'play' market has multiple vulnerabilities...

Wetter Deutschland - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wetter Deutschland published at the 'play' market has multiple vulnerabilities...

Hell Mobi - Earn Cash Rewards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hell Mobi - Earn Cash Rewards published at the 'play' market has multiple vulnerabilities...

Miss PeppeR - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Miss PeppeR published at the 'play' market has multiple vulnerabilities...

Learn Turkish - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Learn Turkish published at the 'play' market has multiple vulnerabilities...

Crazy About Startups - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Crazy About Startups published at the 'play' market has multiple vulnerabilities...

Let's Encrypt SSL Certificate Detection

Binary data 9130.prm...

Paragon Initiative Enterprises: SSL certificate public key less than 2048 bit

One of the SSL certificates used by your SSL server contains a public key less than 2048 bit long. New Standard for SSL Certificates Industry standards set by the Certification Authority/Browser CA/B Forum require that certificates issued after January 1, 2014 MUST be at least 2048-bit key length...