Wear Audio Recorder - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wear Audio Recorder published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21726: Email Messages Distributing Malicious Software on March 15, 2016

Medium Alert ID: 44132 First Published: 2016 March 15 18:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21726 may contain the following files: Name | Si...

safetyatwork.com XSS vulnerability

Vulnerable URL: http://www.safetyatwork.com/?domain=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.03.2016 Latest check for patch:| 03.03.2016 01:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Samsung KNOX 1.0 Weak eCryptFS Key Generation

Subject: CVE-2016-1919 Weak eCryptFS Key generation from user password on KNOX 1.0 / Android 4.3 Vulnerability Description ========================= The vulnerability allows disclosure of Data-at-Rest of Samsung KNOX 1.0 containers. KNOX container data is encrypted using eCryptFS containers. The...

pylex.com XSS vulnerability

Vulnerable URL: http://www.pylex.com/en/DT.asp?dt=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3766488...

johnsoncontrols.at XSS vulnerability

Vulnerable URL: http://www.johnsoncontrols.at/content/at/de/search.html?q="...

tanksartscentre.com XSS vulnerability

Vulnerable URL: http://www.tanksartscentre.com/home/search.asp?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2Fxssposed%2F%29%3E=0=0 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

(Pwn2Own) Microsoft Windows secdrv.sys Uninitialized Buffer Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the secdrv.sys...

hgcomminges.fff.fr XSS vulnerability

Vulnerable URL: http://hgcomminges.fff.fr/competitions/php/recherche/6503rechercher.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Linux x86_64 - /bin/sh

Linux x8664 - /bin/sh. Shellcode exploit for linx86-64 platform Exploit Title: Shellcode /bin/sh for Linux x8664 different approach Date: 2015-09-10 Exploit Author: Fanda Uchytil Version: 1 Tested on: Linux 3.16.0-4-amd64 Debian, 2.6.32-openvz-042stab093.5-amd64 Centos/RHEL based, 2.6.32-5-amd64...

shop.expresskuva.fi XSS vulnerability

Vulnerable URL: http://shop.expresskuva.fi/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

Meet the NSA's Best Friend in Spying On The Internet

Fed up with the NSA-Snowden updates? Wait a second...there's some more! Back in May 2013, when former NSA employee Edward Snowden leaked classified documents from the U.S. National Security Agency NSA, we doubted the relationship between NSA and telecommunications giant AT&T. But, now their...

AT&T Facilitated NSA Surveillance Efforts

Telecommunication giant AT&T facilitated, to a larger degree than any other provider, the National Security Agency’s surveillance reach beyond domestic telephone data collection to email and Internet traffic, companion New York Times and ProPublica articles said on Saturday. It’s probably the...

Cisco TelePresence Video Communication Server Expressway Information Disclosure Vulnerability

A vulnerability in the System Snapshot of Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of data at rest. An attacker could exploit this vulnerability by...

trackinfo.com XSS vulnerability

Vulnerable URL: http://www.trackinfo.com/dog-search.jsp?keyword="=6=10=dogname Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 262274 Google Pagerank| 4 VI...

NHN Japan LINE@Arbitrary Code Execution Vulnerability

LINE is an ultra-popular social app from NHN Japan. A security vulnerability exists in NHN Japan LINE@, which can be exploited by an attacker to inject and execute arbitrary code in the user context by performing a man-in-the-middle attack...

LINE@ vulnerable to script injection

Overview LINE@ provided by LINE Corporation is an application used to communicate with others. LINE@ is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle...

InVision: Enumeration and Guessable Email (OWASP-AT-002)T hrough Login Form

Delayed resolution due to changes in our program., public disclosure ok...

[SECURITY] Fedora 21 Update: mksh-50f-1.fc21

mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...

The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the at-3.1.8 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...