PT-2017-8916

Name of the Vulnerable Software and Affected Versions LibTomCrypt versions prior to 2.2.0 OP-TEE versions prior to 2.2.0 Description The issue arises from the rsa verify hash ex function in rsa verify hash.c, which fails to validate that the message length matches the ASN.1 encoded data length...

Golfshot: Golf GPS + Tee Times - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Golfshot: Golf GPS + Tee Times published at the 'play' market has multiple vulnerabilities...

tee-on.com XSS vulnerability

Vulnerable URL: https://www.tee-on.com/loginfailed.html?Message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 939756 Google Pagerank|...

Mate7 TrustZone Exploit

The tzdriver and TEEOS modules of the Huawei Mate 7 have vulnerabilities which may allow malicious apps to perform denial of service attacks, or gain privileges, by gaining access to the TEE...

Yahoo!: Information Disclosure, groups.yahoo.com,6-april-2014, #SpringClean

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but unfortunately this bug is already known to us. We appreciate your adherence to responsible disclosure guidelines and look forwa...

PT-2002-2779 · Teekai · Teekai Tracking Online

Name of the Vulnerable Software and Affected Versions: TeeKai Tracking Online version 1.0 Description: The issue concerns the weak encryption of web usage statistics stored in the data/userlog/log.txt file. This weakness allows remote attackers to identify the IP addresses of visitors to the site...