Cracked screen - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Cracked screen published at the 'play' market has multiple vulnerabilities...

Caller Screen Dialer Caller ID - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Caller Screen Dialer Caller ID published at the 'play' market has multiple vulnerabilities...

Screen Crash - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Screen Crash published at the 'play' market has multiple vulnerabilities...

Scary screen - Joke - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Scary screen - Joke published at the 'play' market has multiple vulnerabilities...

Crazy Lock Screen - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Lock Screen published at the 'play' market has multiple vulnerabilities...

Aterm WG300HP vulnerable to cross-site request forgery

Overview Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Fedora 23 : gdm-3.18.2-1.fc23 (2015-271025c598)

This update fixes CVE-2015-7496 - lock screen bypass when holding escape key. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : xscreensaver-5.34-1.fc23 (2015-19b2b73dc5)

A security flaw was found that xscreensaver aborts in some case with dual screen and unplugging one of them. This new rpm should fix the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Multiple Corega wireless LAN routers vulnerable to cross-site request forgery

Overview Multiple wireless LAN routers provided by Corega Inc contain a cross-site request forgery vulnerability CWE-352. Yutaka Kokubu and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. and Ueki Shuya reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#59349382: Multiple Corega wireless LAN routers vulnerable to cross-site request forgery

Multiple wireless LAN routers provided by Corega Inc contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged into the management screen, various administrative functions may be performed. Solution Apply a workaround The following workaround...

Windows 10 Started Showing Ads on LockScreen — Here's How to Turn It OFF

If you've upgraded your older version of Windows OS to an all new Windows 10 operating system then you may have noticed an advertisement appearing on your desktop or laptop’s lock screen over the past couple of days. Yes, this is what Microsoft has chosen to generate revenue after offering Free...

Centreon Web Useralias Command Execution

Centreon Web Interface use exploit/linux/http/centreon/useraliasexec msf undefineduseraliasexec show actions ...actions... msf undefineduseraliasexec set ACTION msf undefineduseraliasexec show options ...show and set options... msf undefineduseraliasexec run This module requires Metasploit:...

[SECURITY] Fedora 22 Update: kscreenlocker-5.5.4-3.fc22

Library and components for secure lock screen architecture...

Microsoft Windows WebDAV BSoD Proof Of Concept

/ Source: https://github.com/koczkatamas/CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death code for CVE-2016-0051 MS-016. Full Proof of Concept: https://github.com/koczkatamas/CVE-2016-0051/archive/master.zip...

iOS Bypass Info Disclosure

The vulnerability of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to circumvent existing mechanisms for restricting local access and gain access to information about notifications by...

Exploit for CVE-2016-0051

CVE-2016-0051 Proof-of-concept BSoD Blue Screen of Death and...

JVN#54686544: HOME SPOT CUBE multiple vulnerabilities

HOME SPOT CUBE provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE contains multiple vulnerabilities listed below. Cross-site scripting - CVE-2016-1136 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.3 CVSS v2|...

PT-2016-3917

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.5 Description A cross-site scripting XSS issue exists in the internationalization feature of the default homescreen app, allowing user-assisted remote attackers to inject arbitrary web script or HTML via ...

Debian Security Advisory DSA 3438-1 (xscreensaver - security update)

It was discovered that unplugging one of the monitors in a multi-monitor setup can cause xscreensaver to crash. Someone with physical access to a machine could use this problem to bypass a locked session. OpenVAS Vulnerability Test $Id: deb3438.nasl 6608 2017-07-07 12:05:05Z cfischer $...

CVE-2015-8510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...