Спортмастер - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Спортмастер published at the 'play' market has multiple vulnerabilities...

AIX 7.2 : bos.rte.control (U870330)

The remote host is missing AIX PTF U870330, which is related to the security of the package bos.rte.control. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML dat...

Wordpress BulletProof Security 53.3 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple XSS Vulnerabilities in BulletProof Security Affected Software : BulletProof Security Affected Versions: v53.3 and possibly below Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type :...

FreeBSD : ImageMagick -- multiple vulnerabilities (0d724b05-687f-4527-9c03-af34d3b094ec) (ImageTragick)

Openwall reports : Insufficient filtering for filename passed to delegate's command allows remote code execution during conversion of several file formats. Any service which uses ImageMagick to process user-supplied images and uses default delegates.xml / policy.xml, may be vulnerable to this...

[SECURITY] Fedora 22 Update: openvas-libraries-8.0.7-2.fc22

openvas-libraries is the base library for the OpenVAS network security scanner...

Debian DSA-3566-1 : openssl - security update

Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit. - CVE-2016-2105 Guido Vranken discovered that an overflow can occur in the function EVPEncodeUpdate, used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption....

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.7-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

Htcap - web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes

htcap is a web application scanner able to crawl single page application SPA in a recursive manner by intercepting ajax calls and DOM changes. Htcap is not just another vulnerability scanner since it's focused mainly on the crawling process and uses external tools to discover vulnerabilities. It'...

MIT Launches Experimental Bug Bounty Program

The effectiveness of bug bounty programs is difficult to deny, especially after adoption of one at Uber, which announced last month it would begin paying $10,000 for critical bugs, and the Department of Defense, whose Hack the Pentagon illustrates the government’s softening stance on hackers. The...

Tumblr Mobile Application Detection

Binary data 9249.prm...

Oracle MySQL 5.5.x < 5.5.45 / 5.6.x < 5.6.26 Multiple Vulnerabilities

Binary data 9235.prm...

Drupal 7.x < 7.43 Multiple Vulnerabilities

Binary data 9220.prm...

Google Chrome < 49.0.2623.108 Multiple Vulnerabilities

Binary data 9204.pasl...

Dr. Parking 4 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Parking 4 published at the 'play' market has multiple vulnerabilities...

Read & Play Kids Stories Songs - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Read & Play Kids Stories Songs published at the 'play' market has multiple vulnerabilities...

BLOW mini games for Baby Kids - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BLOW mini games for Baby Kids published at the 'play' market has multiple vulnerabilities...

Boat Puzzles for Toddlers Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Boat Puzzles for Toddlers Kids published at the 'play' market has multiple vulnerabilities...

Robot match - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Robot match published at the 'play' market has multiple vulnerabilities...

Guess the word by 4 pics - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the word by 4 pics published at the 'play' market has multiple vulnerabilities...

Wheel Of Fun Turkish - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Wheel Of Fun Turkish published at the 'play' market has multiple vulnerabilities...