Heartbleed and other heartaches

Security Heartbleed and other heartaches Share April 11th, 2014 As has been reported extensively already, OpenSSL just fixed a serious vulnerability, dubbed Heartbleed. OpenSSL is used in a variety of products used on the internet, including Opera products and servers. We want to share with you h...

Android Browser and WebView addJavascriptInterface Code Execution

This Metasploit module exploits a privilege escalation issue in Android versions prior 4.2's WebView component that arises when untrusted Javascript code is executed by a WebView that has one or more Interfaces added to it. The untrusted Javascript code can call into the Java Reflection APIs...

flash-plugin: multiple code execution flaws (APSB13-14)

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before...

flash-plugin: multiple code execution flaws (APSB13-05)

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x...

flash-plugin: multiple code-execution flaws (APSB12-24)

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600...

PT-2012-2859 · Adobe +2 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 10.3.183.18 Adobe Flash Player 11.x versions prior to 11.2.202.228 Adobe Flash Player versions prior to 10.3.183.18 on Solaris Adobe Flash Player 11.x versions prior to 11.2.202.223 on Solaris Adobe Flash...

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

KLA10139 Vulnerability in Dolphin Browser HD

An unspecified vulnerability was found in the Dolphin Browser HD. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via an unknown vector. Original advisories - Related products Dolphin-Browser-HD-for-Android CVE list CVE-2012-1392...

[Video+Pdf] Android No-Permissions Reverse Shell

Достаточно объемная презентация с дефкона: http://www.defcon.org/images/defcon-...ooking-For.pdf Демо-видео от ViaForensics: Дамп настроек, листинг директорий- все включено. Тема актуальна для андроидов начиная 1.5 до 4.0...