[SECURITY] Fedora 23 Update: openslp-2.0.0-8.fc23

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

FireEye Details Microsoft Zero Day Attack on 100 Companies

More than 100 North American companies were attacked by crooks exploiting a Windows zero day vulnerability. The attacks began in early March and involved the zero day vulnerability CVE-2016-0167 reported and partially fixed in April’s Patch Tuesday security bulletins by Microsoft. The zero day wa...

Yoga - Track Yoga - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Yoga - Track Yoga published at the 'play' market has multiple vulnerabilities...

CWMoney 2.0 Expense Track - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CWMoney 2.0 Expense Track published at the 'play' market has multiple vulnerabilities...

123greetings.com XSS vulnerability

Vulnerable URL: http://www.123greetings.com/connect/track?xwx--alert/XSSPOSED/...

Matroska Media Container libmatroska Multiple ElementList Double Free Vulnerabilities

Talos Vulnerability Report TALOS-2016-0037 Matroska Media Container libmatroska Multiple ElementList Double Free Vulnerabilities January 28, 2016 CVE Number CVE-2016-1515 Description A use after free/double free vulnerability can occur in libmatroska while parsing Track elements of the MKV...

PT-2015-3359

Name of the Vulnerable Software and Affected Versions BMC Track-It! versions prior to 11.4 Hotfix 3 Description The issue is related to insufficient access control in the FileStorageService, which exposes an unauthenticated .NET remoting file storage service on port 9010. This allows an attacker ...

Information disclosure

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-5655

The CVE-2015-5655 issue affects the Party Track SDK for iOS prior to 1.6.6 from Adways Inc. The underlying vulnerability is that the SDK does not verify X.509 certificates from SSL/TLS servers, enabling man-in-the-middle attacks where an attacker could intercept or modify encrypted communications...

PT-2015-7018

Name of the Vulnerable Software and Affected Versions Adways Party Track SDK version prior to 1.6.6 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the SDK does not verify X.509 certificates from SSL...

CVE-2015-5655: Undefined Security Weakness

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Mozilla 42 Brings Private Browsing with Tracking Protection Live

Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately. The feature, Private Browsing with Tracking Protection, previously available to beta users, blocks third party page elements, such as ads, social network buttons, analytics, and...

Adways Party Track SDK for iOS Security Bypass Vulnerability

Adways Party Track SDK for iOS is an iOS-based system for monitoring the effectiveness of mobile app ads from Adways. A security bypass vulnerability exists in Adways Party Track SDK for iOS. The vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack or impersonate a...

Party Track SDK for iOS fails to verify server certificates

Overview Party Track SDK for iOS provided by Adways Inc. fails to verify server certificates in encrypted HTTPS communications. According to the developer, in addition to communications by the SDK, communications by the application using NSURLConnection also fail to verify server certificates...

JVN#48211537: Party Track SDK for iOS fails to verify server certificates

Party Track SDK for iOS provided by Adways Inc. fails to verify server certificates in encrypted HTTPS communications. According to the developer, in addition to communications by the SDK, communications by the application using NSURLConnection also fail to verify server certificates. Impact A...

BMC Track-It! 11.4 - Multiple Vulnerabilities

BMC Track-It! 11.4 - Multiple Vulnerabilities Multiple critical vulnerabilities in BMC Track-It! 11.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 04/07/2016 / Last updated:...

BMC Track-It! 11.4 - Multiple Vulnerabilities

Multiple critical vulnerabilities in BMC Track-It! 11.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 04/07/2016 / Last updated: 01/01/2017 Background and summary BMC Track-It!...

ownCloud: [s3.owncloud.com] Web Server HTTP Trace/Track Method Support

Hello. Not ineresting bug but you can fixed it as in 83837. https://hackerone.com/reports/83837 Request: TRACE /gxDM8DATHA HTTP/1.1 Host: s3.owncloud.com Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.21 KHTML, like Gecko...