UBUNTU-CVE-2016-5696

net/ipv4/tcpinput.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack...

Bug Hunting Cyber Bots Set to Square Off at DEF CON

LAS VEGAS — A government project in the works since 2013 is set to conclude Thursday at DEF CON when DARPA’s Cyber Grand Challenge culminates with a competition it’s calling the CGC Final Event. The challenge will mirror Capture the Flag competitions usually held at the hacking conference. CTF...

Amazon Linux AMI : kernel (ALAS-2016-726)

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL. CVE-2016-1237 A flaw was found in the Linux kernel's keyring handling code, where in keyrejectandlink an uninitialised variable would...

Resurrection of the Evil Miner

At FireEye Labs, we recently detected the resurgence of a coin mining campaign with a novel and unconventional infection vector in the form of an iFRAME inline frame – an HTML document embedded inside another HTML document on a web page that allows users to get content from another separate sourc...

OracleVM 3.3 / 3.4 : openssh (OVMSA-2016-0048)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2016-3115: missing sanitisation of input for X11 forwarding 1317817 - Restore functionallity of pamsshagentauth in FIPS mode 1278315 - Initialize devicesdone variable for challenge response 128146...

openssh security, bug fix, and enhancement update

5.3p1-117 - CVE-2016-3115: missing sanitisation of input for X11 forwarding 1317817 5.3p1-116 - Restore functionallity of pamsshagentauth in FIPS mode 1278315 - Initialize devicesdone variable for challenge response 1281468 - Update behaviour of X11 forwarding to match upstream 1299048 5.3p1-115 ...

community.michelinchallengebibendum.com XSS vulnerability

Vulnerable URL: https://community.michelinchallengebibendum.com/community/mcbcommunity/blog/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest che...

MAGIC KINDER Challenge - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MAGIC KINDER Challenge published at the 'play' market has multiple vulnerabilities...

Quiz Challenge - Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Quiz Challenge published at the 'play' market has multiple vulnerabilities...

Number Challenge - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Number Challenge published at the 'play' market has multiple vulnerabilities...

Anime Challenge - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Anime Challenge published at the 'play' market has multiple vulnerabilities...

Football Challenge - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Football Challenge published at the 'play' market has multiple vulnerabilities...

World Boxing Challenge - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application World Boxing Challenge published at the 'play' market has multiple vulnerabilities...

PBA® Bowling Challenge - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PBA® Bowling Challenge published at the 'play' market has multiple vulnerabilities...

Heavy Forklift Challenge 2015 - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Heavy Forklift Challenge 2015 published at the 'play' market has multiple vulnerabilities...

Extreme Forklift Challenge 3D - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Extreme Forklift Challenge 3D published at the 'play' market has multiple vulnerabilities...

Bubble Crush Challenge - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bubble Crush Challenge published at the 'play' market has multiple vulnerabilities...

Hairdresser Challenge Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Hairdresser Challenge Games published at the 'play' market has multiple vulnerabilities...

Slot Challenge - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slot Challenge published at the 'play' market has multiple vulnerabilities...

Pyramid Solitaire Challenge - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pyramid Solitaire Challenge published at the 'play' market has multiple vulnerabilities...