CVE-2017-2694: Undefined Security Weakness

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

Microsoft Edge Chakra JIT - Incorrect GenerateBailOut Calling Patterns

Microsoft Edge Chakra JIT - Incorrect GenerateBailOut Calling Patterns / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1333 Bailout: "ChakraCore’s background JIT compiler generates highly optimized JIT’ed code based upon the data and infers likely usage patterns based on the...

Microsoft Edge Chakra JIT Incorrect GenerateBailOut Calling Patterns Exploit

Exploit for windows platform in category dos / poc Microsoft Edge: Chakra: JIT: Incorrect GenerateBailOut calling patterns CVE-2017-11799 Bailout: "ChakraCoreas background JIT compiler generates highly optimized JITaed code based upon the data and infers likely usage patterns based on the profile...

Updated libffi packages fix security vulnerability

libffi, a library used to call code written in one language from code written in a different language, was enforcing an executable stack on the i386 architecture. While this might not be considered a vulnerability by itself, this could be leveraged when exploiting other vulnerabilities, such as t...

[SECURITY] Fedora 26 Update: libffi-3.1-11.fc26

Compilers for high level languages generate code that follow certain conventions. These conventions are necessary, in part, for separate compilation to work. One such convention is the "calling convention". The calling convention is a set of assumptions made by the compiler about where function...

theroadiscalling.com XSS vulnerability

Vulnerable URL: http://www.theroadiscalling.com/Jobs.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10209128 VIP website status:| No Check theroadiscalling.com SSL connection:|...

Telegram Messenger Adds AI-powered Encrypted Voice Calls

Joining the line with rival chat apps WhatsApp, Viber, Facebook Messenger, and Signal, the Telegram instant messaging service has finally rolled out a much-awaited feature for the new beta versions of its Android app: Voice Calling. And what's interesting? Your calls will be secured by Emojis, an...

Apple Safari - Out-of-Bounds Read when Calling Bound Function

Apple Safari - Out-of-Bounds Read when Calling Bound Function var ba; function s alert"in s"; ba = this; function g alert"in g"; return...

Signal Messaging App Rolls Out Encrypted Video Calling

WhatsApp and Facebook have so far the largest end-to-end encrypted video calling network of all, but now another popular end-to-end encrypted messaging app recommended by whistleblower Edward Snowden is ready to give them a really tough competition. The Signal app, which is widely considered the...

Nextcloud: Stored XSS on new Calling plugin (spreed)

There's a stored xss vulnerability .... Proof Of Concept : =============== 1. Set name as an xss payload like "x. F143238 2. Invite people to single call room. 3. Xss will execute in IE. It doesn't support CSP F143237 Impact : ======== Admin user can be xssed via this method if admin uses browser...

Asterisk Authentication Bypass Vulnerability (AST-2016-009)

Asterisk is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...

WhatsApp Video Calling for Android Launched

WhatsApp is, no doubt, the largest end-to-end encrypted messaging network that allows over billion of its users to send messages, photos, videos, voice messages, documents, and calls that are secure from falling into the wrong hands. And now it seems like WhatsApp is rolling out a much-awaited...

SQL Injection Vulnerability in Call System of Shanghai Yunyi Communication Technology Co.

Cloud Next CRM System is an IP Calling System The product suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain database data...

Windows x86 WinExec"cmd.exe",0 Shellcode

Windows x86 WinExec"cmd.exe",0 Shellcode. Shellcode exploit for win32 platform / Title : Windows x86 WinExec"cmd.exe",0 shellcode Date : 07/06/2016 Author : Roziul Hasan Khan Shifat Tested On : Windows 7 Professional x86 / / To Compile: -------------- $nasm -f win32 winexec.asm -o exec.obj Linkin...

Hey Allo! Meet Google's AI-powered Smart Messaging App

Get Ready for a whole new Artificial Intelligence-based Messaging experience. At I/O event Wednesday, Google unveiled its new messaging app named Allo: A smart messaging app powered with machine learning programming and the company’s newly announced AI bot Google Assistant. You just have to sign ...

Free Facetime Calling Guide - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Free Facetime Calling Guide published at the 'play' market has multiple vulnerabilities...

TextMe Up Free Calling & Texts - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application TextMe Up Free Calling & Texts published at the 'play' market has multiple vulnerabilities...

Video calling Free - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video calling Free published at the 'play' market has multiple vulnerabilities...

Tablet Calling - BSD license, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Tablet Calling published at the 'play' market has multiple vulnerabilities...

UppTalk WiFi Calling & Texting - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application UppTalk WiFi Calling & Texting published at the 'play' market has multiple vulnerabilities...