Open Source Static Code Analyser: StaCoAn

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credentials API keys URL’s of API’s Decryption keys Major coding...

RIG Exploit Kit Rotator

RIG exploit kit rotator is a web exploit kit server that operates by delivering malicious URL's to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

Threat Outbreak Alert RuleID31961: Email Messages Distributing Malicious Software on February 9, 2018

Medium Alert ID: 56782 First Published: 2018 February 9 20:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31961 may contain the following files: Name |...

Threat Outbreak Alert RuleID31931: Email Messages Distributing Malicious Software on February 7, 2018

Medium Alert ID: 56699 First Published: 2018 February 7 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31931 may contain the following files: Name |...

Design/Logic Flaw

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

CVE-2017-6169 affects F5 BIG-IP: vulnerable in BIG-IP with PEM provisioned and URL categorization enabled when processing malformed URLs, causing Traffic Management Microkernel (TMM) to produce a core file. Affected versions include 13.0.0, 12.0.0–12.1.3, and 11.6.0–11.6.2. The F5 advisory lists ...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Debian: Security Advisory (DLA-1068-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID31900: Email Messages Distributing Malicious Software on February 2, 2018

Medium Alert ID: 56655 First Published: 2018 February 2 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31900 may contain the following files: Name |...

The vulnerability of the OpenEdge software platform, related to deficiencies in access control, allows a hacker to execute malicious Java classes.

The vulnerability of the OpenEdge software platform is related to deficiencies in access control when using the standard configuration. Exploiting this vulnerability allows a malicious actor to upload and execute malicious Java classes through specially crafted URL addresses using port 20931...

Threat Outbreak Alert RuleID31849: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56622 First Published: 2018 January 31 17:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31849 may contain the following files: Name |...

Threat Outbreak Alert RuleID31732: Email Messages Distributing Malicious Software on January 29, 2018

Medium Alert ID: 56600 First Published: 2018 January 29 16:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31732 may contain the following files: Name |...

UBUNTU-CVE-2018-6360

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdlhook.lua. For example, an av://lavfi:ladspa=file= UR...

CVE-2018-6360

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdlhook.lua. For example, an av://lavfi:ladspa=file= UR...

CVE-2018-6360

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdlhook.lua. For example, an av://lavfi:ladspa=file= UR...

Untappd - Discover Beer - BSD license, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Untappd - Discover Beer published at the 'play' market has multiple vulnerabilities...

Arbitrary file deletion vulnerability in XiaoCms background template.php and database.php pages

Based on PHP+Mysql architecture, XiaoCms Enterprise Builder is a small, flexible, simple and easy-to-use lightweight cms. XIAOCMS background template.php and database.php page there are arbitrary file deletion vulnerability. Attackers can successfully delete files in the root directory by...

Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3544-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3544-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could...

Fastest Flashlight - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Fastest Flashlight published at the 'play' market has multiple vulnerabilities...

USN-3544-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, spoof the origin in audio capture prompts, trick the user in to providing HTTP...