Fox Digital Copy (Beta) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Fox Digital Copy Beta published at the 'play' market has multiple vulnerabilities...

CVE-2017-6429

Buffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote attackers to have unspecified impact via a pcap file with an over-size packet...

CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

CVE-2015-8993

Malicious file execution vulnerability in Intel Security CloudAV Beta before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...

Google Chrome 57 Browser Update Patches 'High' Severity Flaws

Google released an updated version of its Chrome browser on Thursday to fix nine high-severity vulnerabilities that if exploited could allow adversaries to take control of targeted systems. As part of the update, Google thanked nearly two dozen bug hunters with bug bounty payments totaling $38,00...

CVE-2017-6397

FlightAirMap v1.0-beta.10 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient filtration of user-supplied data in several *-sub-menu.php pages. The issue allows an attacker to inject arbitrary HTML/JavaScript in the context of the vulnerable website. Connected s...

Signal Messaging App Rolls Out Encrypted Video Calling

WhatsApp and Facebook have so far the largest end-to-end encrypted video calling network of all, but now another popular end-to-end encrypted messaging app recommended by whistleblower Edward Snowden is ready to give them a really tough competition. The Signal app, which is widely considered the...

CVE-2016-8364

An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b. Object memory can read a network packet that is larger than the space that is available, a Heap-based Buffer Overflow...

WhatsApp may let you Recall Sent Messages and Track Friends Location in Realtime

Are you the victim of sending awkward WhatsApp messages to your friends, families, and colleagues while you're drunk? No need to panic now, as you'll soon be able to recall your drunk or mistakenly sent text messages on WhatsApp – a much-demanded feature. Recall Unread Messages Sent Mistakenly Th...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

CVE-2016-6167

CVE-2016-6167 affects PuTTY beta 0.67 and stems from untrusted search path (DLL hijacking) vulnerabilities where local users can place UxTheme.dll or ntmarta.dll in the current working directory to execute arbitrary code or gain privileges. Publicly documented details describe exploitation via a ...

Opera Mini browser beta - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Opera Mini browser beta published at the 'play' market has multiple vulnerabilities...

iRECA: Курьер beta (Unreleased) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application iRECA: Курьер beta Unreleased published at the 'play' market has multiple vulnerabilities...

MantisBT < 1.2.19, 1.3.0 'view_type' XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

MantisBT 1.x < 1.3.0-beta.1 Information Disclosure

Binary data 9890.prm...

Firefox Beta — Web Browser - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Firefox Beta — Web Browser published at the 'play' market has multiple vulnerabilities...

PT-2016-3318 · Libevent +5 · Libevent +5

Name of the Vulnerable Software and Affected Versions: libevent versions prior to 2.1.6-beta Description: The issue is related to a stack-based buffer overflow in the evutil parse sockaddr port function, which can be exploited by attackers to cause a denial of service, resulting in a segmentation...

UBUNTU-CVE-2016-10197

The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service out-of-bounds read via an empty hostname...

NETGEAR WNR2000 Router Multiple Vulnerabilities (Dec 2016) - Active Check

NETGEAR WNR2000 Router devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Beta Firmware Updates Available for Vulnerable Netgear Routers

Netgear has begun pushing out beta versions of firmware updates that will address a critical vulnerability that was disclosed late last week. The networking vendor also confirmed that many more routers in its Nighthawk line are vulnerable than originally reported. The flaw allows attackers to car...