CVE-2016-2508

media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the mozilla::dom::TextTrack::AddCue function in Mozilla Firefox and SeaMonkey due to improper garbage collection of text track management variables. Exploiting this vulnerability allows malicious actors to execute arbitrary code or cause service failures e.g., errors whe...

poslaju.com.my Open Redirect vulnerability

Vulnerable URL: http://poslaju.com.my/track-trace/?3trackingIds=1,;...

libEBML Double Release Vulnerability

libEBML is a C++ library maintained by the Matroska team for parsing EBML an audio/video framework files. A double release vulnerability exists in libEBML. An attacker can exploit this vulnerability by leveraging the Track element of the MKV container to cause post-release reuse...

PT-2016-4084

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 Microsoft Exchange Server 2016 Gold and Cumulative Update 1 Description The issue allows remote attackers to track users via a crafted HTML e-mail message due t...

[SECURITY] Fedora 23 Update: openslp-2.0.0-8.fc23

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

FireEye Details Microsoft Zero Day Attack on 100 Companies

More than 100 North American companies were attacked by crooks exploiting a Windows zero day vulnerability. The attacks began in early March and involved the zero day vulnerability CVE-2016-0167 reported and partially fixed in April’s Patch Tuesday security bulletins by Microsoft. The zero day wa...

Yoga - Track Yoga - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Yoga - Track Yoga published at the 'play' market has multiple vulnerabilities...

CWMoney 2.0 Expense Track - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CWMoney 2.0 Expense Track published at the 'play' market has multiple vulnerabilities...

123greetings.com XSS vulnerability

Vulnerable URL: http://www.123greetings.com/connect/track?xwx--alert/XSSPOSED/...

Matroska Media Container libmatroska Multiple ElementList Double Free Vulnerabilities

Talos Vulnerability Report TALOS-2016-0037 Matroska Media Container libmatroska Multiple ElementList Double Free Vulnerabilities January 28, 2016 CVE Number CVE-2016-1515 Description A use after free/double free vulnerability can occur in libmatroska while parsing Track elements of the MKV...

PT-2015-3359

Name of the Vulnerable Software and Affected Versions BMC Track-It! versions prior to 11.4 Hotfix 3 Description The issue is related to insufficient access control in the FileStorageService, which exposes an unauthenticated .NET remoting file storage service on port 9010. This allows an attacker ...

Information disclosure

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655

The CVE-2015-5655 issue affects the Party Track SDK for iOS prior to 1.6.6 from Adways Inc. The underlying vulnerability is that the SDK does not verify X.509 certificates from SSL/TLS servers, enabling man-in-the-middle attacks where an attacker could intercept or modify encrypted communications...

CVE-2015-5655

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655: Undefined Security Weakness

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-7018

Name of the Vulnerable Software and Affected Versions Adways Party Track SDK version prior to 1.6.6 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the SDK does not verify X.509 certificates from SSL...

Mozilla 42 Brings Private Browsing with Tracking Protection Live

Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately. The feature, Private Browsing with Tracking Protection, previously available to beta users, blocks third party page elements, such as ads, social network buttons, analytics, and...

Adways Party Track SDK for iOS Security Bypass Vulnerability

Adways Party Track SDK for iOS is an iOS-based system for monitoring the effectiveness of mobile app ads from Adways. A security bypass vulnerability exists in Adways Party Track SDK for iOS. The vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack or impersonate a...