Real City Police Driver 2016 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Real City Police Driver 2016 published at the 'play' market has multiple vulnerabilities...

TS Nearby - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application TS Nearby published at the 'play' market has multiple vulnerabilities...

Ear Spy: Super Hearing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Ear Spy: Super Hearing published at the 'play' market has multiple vulnerabilities...

Sirens and Horns - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Sirens and Horns published at the 'play' market has multiple vulnerabilities...

Speak German - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Speak German published at the 'play' market has multiple vulnerabilities...

Plantronics Hub™ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Plantronics Hub™ published at the 'play' market has multiple vulnerabilities...

Dictionary - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dictionary published at the 'play' market has multiple vulnerabilities...

Microsoft Windows Security Mechanism Bypass Vulnerability (CNVD-2015-07599)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the United States Microsoft Microsoft. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and...

The vulnerability of the NX-OS network operating system allows a hacker to gain root user privileges.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, who operates remotely and has completed the authentication process, to gain root user privileges due to errors in...

GE MDS PulseNET Hidden Support Account Remote Code Execution (CVE-2015-6456)

A default credential vulnerability has been reported in GE MDS PulseNET. The vulnerability is due to static credentials of a hidden support account permitting administrator access to the system. A remote attacker can exploit these default credentials to access the system. Once authenticated, the...

Symantec Endpoint Protection Manager < 12.1 RU6 Multiple Vulnerabilities (SYM15-005)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6. It is, therefore, affected by the following vulnerabilities : - A DLL injection vulnerability exists due to improper path restrictions when loading DLLs. An authenticated, local attacker ca...

方正阿帕比数字资源平台系统多处漏洞打包-可拖库-可getshell-可获取系统权限（通用 多案例）

简要描述： 乌云是目前最大的漏洞平台，只要你知道的系统、网站，它们的漏洞都可以从乌云上找到，所以乌云的漏洞库是一笔无形的巨大财富 详细说明： Apabi数字资源平台系统是一个用户量很大的图书馆系统 涉及网站太多为图书馆、学校等教育机构，甚至地方人社局等，而绝大部分服务器都不是单一的运行着这一套系统...真是个好“邻居”... None 漏洞证明： 漏洞证明在上面详细说明里已足够、拿下webshell后在99.9%均可获取到系统权限，进入远程桌面任意操作。这里就不证明了，并无深入！...

Samsung default input method remote code execution-vulnerability warning-the black bar safety net

Remote Code Execution as the System User on Samsung Phones Summary In is capable of hijacking your web premise,the attacker can use the Samsung comes with input method update mechanism for remote code execution and has system permissions. Swift input method pre-installed on the Samsung phone and...

This back to the turn of Apple: Google today announced a number of Apple 0day vulnerabilities-vulnerability warning-the black bar safety net

Google Project Zero vulnerability research team today published a Apple number of 0day vulnerabilities and technical details of the vulnerability by enhancing the system permissions and then control the entire victims Mac computer. It is worth mentioning that just two weeks ago, Google just...

The threat is far better than“bleeding heart”for? Abroad new explosion Bash security vulnerability-vulnerability warning-the black bar safety net

These days Linux users can happily play the Red Hat security team yesterday broke a dangerous Bash Shell vulnerability. Its threat may be higher than the earlier disclosure of the“heartbleed”vulnerability is more and more strong! ! A network security company, Engineering Manager Tod Beardsley als...

Katello: CLI - user without access can call "system remove_deletion" command

Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...

QNX RTOS 2.4 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6751/info A vulnerability has been discovered in QNX Real-Time Operating System. It has been reported that an unauthorized user may access arbitrary files. This is possible by requesting the file through the location that...

Network Tool 0.2 PHPNuke Addon Metacharacter Filtering Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3552/info Network Tool is a PHPNuke addon, written and maintained by Rick Fournier. It is designed to offer network features such as nmap, traceroute, and ping from a web interface. A problem with the package has been...

Another Master Key vulnerability discovered in Android 4.3

Earlier this year, in the month of July it was first discovered that 99% of Android devices are vulnerable to a flaw called "Android Master Key vulnerability" that allow hackers to modify any legitimate and digitally signed application in order to transform it into a Trojan program that can be us...

CVE-2013-3408

Summary: CVE-2013-3408 affects Cisco Virtualization Experience Client 6000 Series. The issue stems from improper implementation of underlying operating-system permissions, allowing an authenticated, local attacker to escalate privileges and take full control of the affected system. The root cause...