Ice Age Village - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ice Age Village published at the 'play' market has multiple vulnerabilities...

The Silent Age - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Silent Age published at the 'play' market has multiple vulnerabilities...

Ice Age Adventures - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ice Age Adventures published at the 'play' market has multiple vulnerabilities...

Heroes of Dragon Age - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Heroes of Dragon Age published at the 'play' market has multiple vulnerabilities...

Hearing Age Test - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearing Age Test published at the 'play' market has multiple vulnerabilities...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

Coalfire Contributes to New Book on Cybersecurity

Today marks the launch of a new book published by the New York Stock Exchange and Palo Alto Networks called, "Navigating the Digital Age: The Definitive Cybersecurity Guide for Directors and Officers." Im proud to have worked with my predecessor, the late Rick Dakin, to contribute a chapter to th...

cpe.vtc.edu.hk XSS vulnerability

Vulnerable URL: http://cpe.vtc.edu.hk/en/programmes/programme-search/1093dealingwithbusinessandpeoplesuccessfullyintheinternetagefinancialserviceprofessionalsmodule2howtomakeyourbusinessmoresuccessfulintheinternetagesfinancialserviceindustry732f2? Details: Description| Value ---|--- Patched:| Yes...

Google Now Manually Reviews Play Store Android App Submissions

Google has changed the way it managed apps on the Google Play Store. After years of depending on the automated app check process, the company just made some changes to its Play Store policies that will successfully weed out malicious and undesirable apps from Google Play store. Google has...

CVE-2014-5700

The Brain lab – brain age games IQ (com.sixdead.brainlab) Android app version 2.37 is affected by CVE-2014-5700 due to failing to verify X.509 certificates when connecting to SSL servers. The underlying issue allows man-in-the-middle attackers to spoof legitimate servers and obtain sensitive info...

CVE-2014-5627

The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM application 2.8.0m for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Ice Age Village aka com.gameloft.android.ANMP.GloftIAHM application 2.8.0m for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5627

The CVE-2014-5627 entry concerns the Ice Age Village Android app (com.gameloft.android.ANMP.GloftIAHM) version 2.8.0m, where SSL servers are not verified due to missing X.509 certificate verification. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted ...

Mythic Entertainment Dark Age of Camelot 1.6x Encryption Key Signing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9960/info An encryption key signing vulnerability has been reported to exist in Dark Age of Camelot. This issue is due to a design error in the application that carries out encryption without having the encryption key...

Wordpress Age Verification Plugin <= 0.4 Open Redirect

No description provided by source. Exploit Title: Wordpress Age Verification plugin = 0.4 Open Redirect Date: 2012/01/10 Dork: inurl:wp-content/plugins/age-verification/age-verification.php Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link:...

Dark Age CMS <= 0.2c Beta - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --+++==================================================================================+++-- --+++====== Dark Age CMS = v0.2c Beta Auth Bypass SQL Injection Vulnerability ======+++--...

Dark Age CMS 2.0 'login.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Age of Sail II <= 1.04.151 Remote Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include zlib.h ifdef WIN32 include winsock.h include string.h include errno.h void stderrvoid char error; switchWSAGetLastError case 10004: error = Interrupted system call; break; case 10009...

Factlink: Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)

Issue: Strict Transport Security with too short max age. Description: Your site use a good "Strict Transport Security" but with short MAX AGE! Severity: See more information below. Proof of Concept by ssllabs.com 100% affidability: "Strict Transport Security HSTS Yes max-age=2592000 TOO SHORT les...

Localize: Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)

Hello again team of Localize! I have already reported this bug to the HackerOne team..and they fix it..not immediately, because it's low priority but they fix it! Report: https://hackerone.com/reports/3709 : Issue: Strict Transport Security with too short max age. Description: Your site use a goo...