Mandic magiC - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Mandic magiC published at the 'play' market has multiple vulnerabilities...

ScanLife Barcode & QR Reader - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ScanLife Barcode & QR Reader published at the 'play' market has multiple vulnerabilities...

LG TV SmartShare-webOS - AWS Credentials, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LG TV SmartShare-webOS published at the 'play' market has multiple vulnerabilities...

AWS Console - Customized SSL, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application AWS Console published at the 'play' market has multiple vulnerabilities...

ドラえもんの「リズムパッド」子供向けアプリ音楽知育ゲーム無料 - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ドラえもんの「リズムパッド」子供向けアプリ音楽知育ゲーム無料 published at the 'play' market has multiple vulnerabilities...

Nexpose Scan Engine on the AWS Marketplace

Rapid7 is excited to announce that you can now find a Nexpose Scan Engine AMI on the Amazon Web Services Marketplace making it simple to deploy a pre-authorized Nexpose Scan Engine from the AWS Marketplace to scan your AWS assets! What is an AMI ? An Amazon Machine Image AMI allows you to launch ...

RHEL 6 : jboss-ec2-eap (RHSA-2016:0124)

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

Important: Red Hat Security Advisory: jboss-ec2-eap security and enhancement update for EAP 6.4.6

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

[SECURITY] Fedora 23 Update: openstack-heat-2015.1.2-2.fc23

Heat provides AWS CloudFormation and CloudWatch functionality for OpenStack...

Amazon Certificate Manager Brings Free SSL Certs to AWS Users

Amazon is getting into the certificate game. The company announced late last week that it launched a certificate manager to expedite the process of securing SSL/TLS certificates for customers looking to add HTTPS to their sites or apps. The move comes less than a year after Amazon applied to...

epoch-lb01-731833173.ap-northeast-1.elb.amazonaws.com XSS vulnerability

Vulnerable URL: http://epoch-lb01-731833173.ap-northeast-1.elb.amazonaws.com/search/search.php?areaname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Bime: SSRF in the Connector Designer (REST and Elastic Search)

Server-Side Request Forgery SSRF in BIME connectors disclosed sensitive AWS metadata...

Shopify: Full access to Amazon S3 bucket containing AWS CloudTrail logs

An Amazon S3 bucket used internally by Shopify was misconfigured, allowing external users to read, write and list objects. The excess permissions have been removed...

Ubiquiti Inc.: Subdomain Takeover in http://assets.goubiquiti.com/

Hi there, Its urgent issue about your subdomain http://assets.goubiquiti.com pointing to AWS S3 but no such website configuration is made. This unused subdomain can claim by anyone and fully take over it. An attacker can fully takeover this subdomain and do whatever he wants. this can cause huge...

apply.aws.af.cm XSS vulnerability

Vulnerable URL: http://apply.aws.af.cm/api/linkedinapply.php?rand=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

RHEL 6 : JBoss EAP (RHSA-2015:2542)

Updated jboss-ec2-eap packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat JBoss Enterprise Application Platform 6.4.4 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. Commo...

Amazon AWS Java SDK vulnerability disclosure-vulnerability warning-the black bar safety net

Today we discuss Amazon AWS java SDK a denial of service vulnerability. This official AWS SDK is often a Java Developer for the integration of a range of AWS services, including Amazon S3 integration with Amazon APIs used to store and index files and the like. Which 1. 8. 0-1. 1 0. 3 4 version of...

Shopify: S3 Buckets open to the world thanks to 'Authenticated Users' ACL

Some of Shopify's Amazon S3 buckets were inadvertently left with "Any Authenticated AWS User" read or write permissions, allowing users outside of Shopify to access the buckets. The excess permissions have been removed...

CVE-2015-5713

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting...

Code injection

Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, 6.5.x before 6.5.4, and 7.0.x before 7.0.1 and Spotfire Analytics Platform before 7.0.2 for AWS Marketplace allow remote attackers to obtain sensitive log information by visiting...