Vergiftungsunfälle bei Kindern - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Vergiftungsunfälle bei Kindern published at the 'play' market has multiple vulnerabilities...

Child Mode & Time Education - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Child Mode & Time Education published at the 'play' market has multiple vulnerabilities...

شرطه الاطفال - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application شرطه الاطفال published at the 'play' market has multiple vulnerabilities...

きかんしゃトーマスチャンネル　子供向けの動画・知育ゲーム無料 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application きかんしゃトーマスチャンネル 子供向けの動画・知育ゲーム無料 published at the 'play' market has multiple vulnerabilities...

リズムタップ 赤ちゃん幼児子供向けのアプリ知育音楽ゲーム無料 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application リズムタップ 赤ちゃん幼児子供向けのアプリ知育音楽ゲーム無料 published at the 'play' market has multiple vulnerabilities...

タッチ！ことばランド　2歳から遊べる言葉を育む子供向けアプリ - Native code usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application タッチ！ことばランド 2歳から遊べる言葉を育む子供向けアプリ published at the 'play' market has multiple vulnerabilities...

リズムプラス 幼児子供向けの音楽遊び チャギントン無料ゲーム - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application リズムプラス 幼児子供向けの音楽遊び チャギントン無料ゲーム published at the 'play' market has multiple vulnerabilities...

うたっておどってアンパンマン 子供向けのアプリ人気知育ゲーム - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application うたっておどってアンパンマン 子供向けのアプリ人気知育ゲーム published at the 'play' market has multiple vulnerabilities...

Firefox browser vulnerabilities that allow a hacker to trigger a service failure or cause other effects

Multiple vulnerabilities in the dom/media/systemservices/CamerasChild.cpp function of the Firefox WebRTC browser implementation are caused by synchronization errors when using a shared resource. Exploitation of these vulnerabilities could allow a malicious actor to cause service failures or other...

The FBI against the judges command: declined to use the Tor browser vulnerability code-vulnerability warning-the black bar safety net

! Last month, the FBI was ordered disclosure used to attack the dark web child pornography website single visitors single full version malicious code. To make this decision of judge Robert J. Bryan, he expressed his understanding of the FBI what exactly is how to caught the accused is a very fair...

UBUNTU-CVE-2016-2381

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp...

uKnowKids Attacks Researcher Over Insecure Database

Child safety firm uKnowKids is blasting a security researcher who discovered the company exposed 1,700 identities of the children they were supposed to be protecting. On Monday, security researcher Chris Vickery alerted uKnowKids, a company that helps parents keep tabs on their kid’s online...

New Relic: Unauthorized Access

Summary of Findings ------------------------------- The remote server https://download.newrelic.com allowed unauthenticated access to special access files that are only intended to be accessible after contacting the New Relic program managers as seen below. Exploiting the...

holychildrye.org XSS vulnerability

Vulnerable URL: http://www.holychildrye.org/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 13:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3270988 Goog...

Government Could Hack Children's Toys to Spy on You

Smartphones, Smart TVs, Smart Watches, Cell Phone Towers, Messaging services… but now, What's Next? Smart Toys? Yes, probably. Tech expert is warning that 'Smart Toys' could now be used by the government intelligence agencies to spy on suspects. As part of the Investigatory Powers Bill, children'...

Tor: FBI Paid CMU $1 Million to De-Anonymize Users

More than a year ago, the Tor Project patched its software against a vulnerability being exploited by researchers at Carnegie Mellon University, it said, for the purpose of de-anonymizing users of Tor hidden services. Yesterday, Tor Project director Roger Dingledine accused the prominent Pittsbur...

The vulnerability of Google Chrome browser allows a perpetrator to circumvent existing access restrictions or cause a service failure.

The vulnerability of the ContainerNode::parserRemoveChild function in the Blink component of Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to circumvent existing access restrictions or cause service failures...

Google Chrome Blink Denial of Service Vulnerability (CNVD-2015-05799)

Google Chrome is a WEB-based browser. A vulnerability in the ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Google Chrome Blink allows remote attackers to construct a malicious WEB page and trick users into parsing it, which can bypass the same-origin policy and execut...

MainWP <= 2.0.22 - Unspecified

Email sent from vendor to users: "Today we released updates to both the MainWP Dashboard 2.0.23 and MainWP Child 2.0.23 that contain additional security hardening for a possible issue found by Francois Harvey and reported through out White Hat Reward Program. We encourage everyone to update both...

Scientific Linux Security Update : sudo on SL6.x i386/x86_64 (20150722)

It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...