CVE-2015-3886

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors...

DEBIAN-CVE-2015-3886

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors...

UBUNTU-CVE-2015-3886

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors...

CVE-2015-3886

CVE-2015-3886 affects libinfinity prior to 0.6.6-1, which does not validate expired SSL certificates. The vulnerability permits remote attackers to affect the system in an unspecified manner via unknown vectors; no exploitation specifics or products/versions beyond the library are stated in the p...

Multiple Pivotal Software Products Accept Expired Certificates Vulnerability

Pivotal Cloud Foundry PCF, UAA, and UAA-Release are products of Pivotal Software, Inc. of the U.S. PCF is a suite of open-source Platform-as-a-Service PaaS cloud computing platforms that provide features such as container scheduling, continuous delivery, and automated service deployment; UAA is a...

KFC Polska - Certificates or keys found, Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application KFC Polska published at the 'play' market has multiple vulnerabilities...

Missing Certificate Verfication

txAWS is missing certificate verification. The library does not properly verify TLS Certificates, allowing a self-signed, expired and mismatched certificate to communicate with the TLS server This can lead to a man-in-the-middle attack or information disclosure...

Fedora 26 : mingw-libtasn1 (2017-d5cf1a55ce)

Noteworthy changes in release 4.11 released 2017-05-27 stable - Introduced the ASN1TIMEENCODINGERROR error code to indicate an invalid encoding in the DER time fields. - Introduced flag ASN1DECODEFLAGALLOWINCORRECTTIME. This flag allows decoding errors in time fields even when in strict DER mode...

[SECURITY] Fedora 26 Update: myproxy-6.1.28-1.fc26

MyProxy is open source software for managing X.509 Public Key Infrastructure PKI security credentials certificates and private keys. MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where need ed. Users ru...

Zomato - Restaurant Finder - Certificates or keys found, Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Zomato - Restaurant Finder published at the 'play' market has multiple vulnerabilities...

Updated nodejs packages fix security vulnerability

Node.js has a defect that may make HTTP response splitting possible under certain circumstances. If user-input is passed to the reason argument to writeHead on an HTTP response, a new-line character may be used to inject additional responses CVE-2016-5325. The tls.checkServerIdentity function in...

Getting cert-y with all-5 AWS certs

I thought my recent experience achieving all five 5 AWS certs might be helpful to others in the community that are looking to do the same. However, this blog isnt meant to stand on its own, and I encourage everyone interested in going for all 5 certs to read other blogs posts too...

Network OSINT Gathering Tool: XRay

XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Does it Work? XRay is a very simple tool, it works this way: 1. It’ll bruteforce subdomains using a wordlist and DNS requests. 2. For every...

Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61

Websites that are still using digital certificates issued by Chinese Certificate Authority WoSign may want to accelerate their plans to replace those certs. Google last week said it will fully distrust remaining certificates issued by the CA starting with Chrome 61. Devon O’Brien of the Chrome...

KineMaster – Pro Video Editor - Certificates or keys found, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application KineMaster – Pro Video Editor published at the 'play' market has multiple vulnerabilities...

Cisco Elastic Services Controller Unauthorized Access Vulnerability

Cisco Elastic Services Controller ESC is an open source modular system from Cisco USA. A security vulnerability exists in Play Framework in Cisco ESC versions prior to 2.3.1.434 and prior to 2.3.2, which stems from the use of static default certificates in the Cisco ESC UI. A remote attacker coul...

Let's Encrypt to Offer Wildcard Certificates in 2018

Certificate authority Let’s Encrypt said this week it will begin offering wildcard certificates in 2018. Wildcard certificates are public key certificates that can be used with multiple subdomains of a domain. The certificates are traditionally viewed as less expensive and more convenient by...

Final Fantasy XV: A New Empire - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Final Fantasy XV: A New Empire published at the 'play' market has multiple vulnerabilities...

Alibaba.com B2B Trade App - Certificates or keys found, ContentProvider mode not defined, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Alibaba.com B2B Trade App published at the 'play' market has multiple vulnerabilities...

AliSuppliers Mobile App - Certificates or keys found, ContentProvider mode not defined, Corrupted files vulnerabilities

HackApp vulnerability scanner discovered that application AliSuppliers Mobile App published at the 'play' market has multiple vulnerabilities...