3604 matches found
CVE-2015-8993
Malicious file execution vulnerability in Intel Security CloudAV Beta before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...
CVE-2015-8993: Undefined Security Weakness
Malicious file execution vulnerability in Intel Security CloudAV Beta before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation...
PT-2017-7524
Name of the Vulnerable Software and Affected Versions Intel Security CloudAV Beta versions prior to 0.5.0.151.3 Description A malicious file execution issue allows attackers to momentarily make the product vulnerable by executing specifically crafted malware during installation or uninstallation,...
Google Chrome 57 Browser Update Patches 'High' Severity Flaws
Google released an updated version of its Chrome browser on Thursday to fix nine high-severity vulnerabilities that if exploited could allow adversaries to take control of targeted systems. As part of the update, Google thanked nearly two dozen bug hunters with bug bounty payments totaling $38,00...
CVE-2017-6397
FlightAirMap v1.0-beta.10 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient filtration of user-supplied data in several *-sub-menu.php pages. The issue allows an attacker to inject arbitrary HTML/JavaScript in the context of the vulnerable website. Connected s...
CVE-2015-8901: Loop with Unreachable Exit Condition
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted MIFF file...
Signal Messaging App Rolls Out Encrypted Video Calling
WhatsApp and Facebook have so far the largest end-to-end encrypted video calling network of all, but now another popular end-to-end encrypted messaging app recommended by whistleblower Edward Snowden is ready to give them a really tough competition. The Signal app, which is widely considered the...
CVE-2016-8364
An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b. Object memory can read a network packet that is larger than the space that is available, a Heap-based Buffer Overflow...
WhatsApp may let you Recall Sent Messages and Track Friends Location in Realtime
Are you the victim of sending awkward WhatsApp messages to your friends, families, and colleagues while you're drunk? No need to panic now, as you'll soon be able to recall your drunk or mistakenly sent text messages on WhatsApp – a much-demanded feature. Recall Unread Messages Sent Mistakenly Th...
CVE-2016-6167
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...
CVE-2016-6167
CVE-2016-6167 affects PuTTY beta 0.67 and stems from untrusted search path (DLL hijacking) vulnerabilities where local users can place UxTheme.dll or ntmarta.dll in the current working directory to execute arbitrary code or gain privileges. Publicly documented details describe exploitation via a ...
CVE-2016-6167: Untrusted Search Path
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...
Opera Mini browser beta - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Opera Mini browser beta published at the 'play' market has multiple vulnerabilities...
iRECA: Курьер beta (Unreleased) - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application iRECA: Курьер beta Unreleased published at the 'play' market has multiple vulnerabilities...
MantisBT < 1.2.19, 1.3.0 'view_type' XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
MantisBT 1.x < 1.3.0-beta.1 Information Disclosure
Binary data 9890.prm...
Firefox Beta — Web Browser - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Firefox Beta — Web Browser published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2016-10197
The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service out-of-bounds read via an empty hostname...
PT-2016-3318 · Libevent +5 · Libevent +5
Name of the Vulnerable Software and Affected Versions: libevent versions prior to 2.1.6-beta Description: The issue is related to a stack-based buffer overflow in the evutil parse sockaddr port function, which can be exploited by attackers to cause a denial of service, resulting in a segmentation...
NETGEAR WNR2000 Router Multiple Vulnerabilities (Dec 2016) - Active Check
NETGEAR WNR2000 Router devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...