697 matches found
Security weakness in Android App SSL Implementations
The most common approach to protect data during communication on the Android platform is to use the Secure Sockets Layer SSL or Transport Layer Security TLS protocols. Thousands of applications in the Google Play market that are using these implementations. A group of researchers including Sascha...
Code injection
Unspecified vulnerability in the KKtalk com.kkliaotian.android application 4.0.0 and 4.1.5 for Android has unknown impact and attack vectors...
DroidDream Attack Underscores Weaknesses of App Stores
The Android Market incident that surfaced Wednesday in which Google was forced to pull more than 20 apps that had been Trojaned is the latest piece of evidence that the mobile app store model is broken and is setting users up for failure. The details of the Android Market episode should be famili...
Insecure Magazine : Issue 28 available for Download !
Insecure Magazine : Issue 28 available for Download ! Database protocol exploits explained Review: MXI M700 Bio Measuring web application security coverage Inside backup and storage: The expert's view Combating the changing nature of online fraud Successful data security programs encompass...
2011: What's Your IT Security Plan?
A gusher of Web applications vulnerabilities, malicious insiders and sophisticated malware threaten networks and data. To keep your systems reasonably secure, what will your security focus be during the year ahead? The answer to that question might depend on what kind of business you’re in – or...
Arachni v0.2.1 - penetration testers Framework - latest release
"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...
CVE-2010-4213
The CVE-2010-4213 entry concerns the Bank of America Android app version 2.12, where a security question’s answer is stored in cleartext. This storage allows physically proximate attackers to read sensitive data from the application data. The available connected documents confirm the affected sof...
Wells Fargo, BoA Cited For Lax Mobile App Security
Days after publishing a report on serious security lapses in the PayPal mobile payments application for the iPhone, a Chicago firm has released an analysis that finds similar problems in a mobile banking applications by Bank of America and Wells Fargo. The report, published on Thursday by...
Jeremiah Grossman on Web App Security, Secure Development and When Web Security Will Improve
Dennis Fisher talks with Jeremiah Grossman, CTO and founder of WhiteHat Security, about the company’s new Website Vulnerability Statistics report, why SQL injection is still such a problem and when Web application security may improve. Download Subscribe to the Digital Underground podcast on...
Syzygy CMS 0.3 - Local File Inclusion / SQL Injection
!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
omnihttpd.txt
A vulnerability exists in the test.php script of OmniHTTPd. The script makes a classic coding error -- trusting unsanitized user input. The query string and cookie values are returned unfiltered. Of most concern, of course, is the query string:...
Security Update for Microsoft Excel Web App (KB2956193) farm-deployment
A security vulnerability exists in Microsoft Excel Web App that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...