662 matches found
blocking SMS, call blocker - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application blocking SMS, call blocker published at the 'play' market has multiple vulnerabilities...
Anti Nuisance-Call&SMS Blocker - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Anti Nuisance-Call&SMS Blocker published at the 'play' market has multiple vulnerabilities...
SMS Blocker. Clean Inbox - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application SMS Blocker. Clean Inbox published at the 'play' market has multiple vulnerabilities...
Calls Blacklist - Call Blocker - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Calls Blacklist - Call Blocker published at the 'play' market has multiple vulnerabilities...
Call Blocker Free - Blacklist - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Call Blocker Free - Blacklist published at the 'play' market has multiple vulnerabilities...
Call Blocker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Call Blocker published at the 'play' market has multiple vulnerabilities...
Remotely Exploitable Bug in Truecaller Puts Over 100 Million Users at Risk
Security researchers have discovered a remotely exploitable vulnerability in Called ID app "Truecaller" that could expose personal details of Millions of its users. Truecaller is a popular service that claims to "search and identify any phone number," as well as helps users block incoming calls o...
Microsoft Deploys Macro-Blocker in Office to Curb Malware
If it ain’t broke, don’t fix it. If there’s one thing the recent surge in threats using macros to spread malware has shown, it’s that the vector is clearly working for attackers. Developers at Microsoft hope a feature in the latest version of Microsoft Office will reduce the frequency of those...
Sniffly - Sniffing Browser History Using HSTS + CSP.
Sniffly is an attack that abuses HTTP Strict Transport Security and Content Security Policy to allow arbitrary websites to sniff a user's browsing history. It has been tested in Firefox and Chrome. More info available in my ToorCon 2015 slides:...
Apple Kicks Out some Malicious Ad-Blocker Apps from its Online Store
Apple has removed several apps from its official iOS App Store that have the ability to compromise encrypted connections between the servers and the end-users. Apple has officially said: We have removed a "few" apps from the iOS App Store that could install root certificates and allow monitoring...
Apple Removes Apps That Expose Encrypted Traffic
Apple has purged its App Store of a number of apps that expose encrypted traffic via the installation of root certificates. Apple has declined to name the apps. “Apple has removed a few apps from the App Store that install root certificates that could allow monitoring of data,” Apple said today i...
Feed protocol with POST bypasses mixed content protections — Mozilla
Security researcher Masato Kinugawa reported that opening a target page using a POST to the url prefixed with the feed: protocol disables the mixed content blocker for that page. This could allow for the risk of a man-in-the-middle MITM scripting attack on pages that accidentally include insecure...
Symantec Norton Antivirus 2001/2002/2003/2004 Script Blocker Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10739/info It is reported that Symantec Norton AntiVirus is prone to a Script Blocker denial of service vulnerability. This may result in a Symantec Norton AntiVirus Script Blocker bypass. The privileges and zone required...
history.go() DoS on multiple browsers
No description provided by source. -- Camino 2.0.2 history.go DoS Found By: DrIDE Tested On: Camino 2.0.2 on OSX 10.6.3 Notes: Impact is reduced because user must either have popup blocker off, or accept popups. Tested On: Safari 4.0.5 on OSX 10.6.3 Notes: Impact is reduced because user must eith...
(Pwn2Own) Mozilla Firefox Pop-Up Blocker Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the pop-up...
Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...
Authentication flaw
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...
CVE-2014-1511
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...
CVE-2014-1511
CVE-2014-1511 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue is described as a remote bypass of the popup blocker via unspecified vectors. Public security advisories in 2014 consolidate Firefox/Thunderbird/SeaMonkey...
