CVE-2016-3726

Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs...

CamDAV - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application CamDAV published at the 'play' market has multiple vulnerabilities...

WarnWetter - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application WarnWetter published at the 'play' market has multiple vulnerabilities...

Jenkins Android - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Jenkins Android published at the 'play' market has multiple vulnerabilities...

Brick Classic HD - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Brick Classic HD published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID22865: Email Messages Distributing Malicious Software on May 13, 2016

Medium Alert ID: 46178 First Published: 2016 May 13 17:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22865 may contain the following files: Name | Size...

Токен - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Токен published at the 'play' market has multiple vulnerabilities...

Schwab Mobile - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Schwab Mobile published at the 'play' market has multiple vulnerabilities...

CloudBees Jenkins CI and Jenkins LTS redirection vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a Java-based continuous integration tool from CloudBees, Inc. It is mainly used to monitor ongoing software releases/testing projects and a number of timed tasks.LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI is a...

Scode - Code World - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Scode - Code World published at the 'play' market has multiple vulnerabilities...

RedHat Update for icedtea-web RHSA-2016:0778-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Cloud Network Automation Provisioner SQL Injection Vulnerability

A vulnerability in the web framework of Cisco Cloud Network Automation Provisioner CNAP could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to a failure to validate user-supplied input in SQL...

7zip UDF CInArchive::ReadFileItem Code Execution Vulnerability

Summary An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution. Tested Versions 7-Zip 32 15.05 beta 7-Zip 64 9.20 Product URLs http://www.7-zip.org/ Details...

Gentoo Security Advisory GLSA 201605-01

Gentoo Linux Local Security Checks GLSA 201605-01 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CMS Made Simple Cross-Site Scripting Vulnerability

CMS Made Simple is an open source content management system. CMS Made Simple fails to properly handle the $SERVER variable, allowing remote attackers to construct malicious URIs, tricking users into parsing them, which can be used in the target user context to perform malicious actions...

Google Fit - Fitness Tracking - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Google Fit - Fitness Tracking published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID22692: Email Messages Distributing Malicious Software on May 5, 2016

Medium Alert ID: 45027 First Published: 2016 May 5 14:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22692 may contain the following files: Name | Size ...

Well Timed - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Well Timed published at the 'play' market has multiple vulnerabilities...

Important: mercurial

Issue Overview: It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository with a specially crafted URL could cause Mercurial to execute arbitrary code. CVE-2016-3068 The binary delta decoder in Mercurial before 3.7...

Debian DSA-3564-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1660 Atte Kettunen discovered an out-of-bounds write issue. - CVE-2016-1661 Wadih Matar discovered a memory corruption issue. - CVE-2016-1662 Rob Wu discovered a use-after-free issue related to extensions. -...