Announcing the Third Annual Flare-On Challenge

Let fall be the season for reverse engineering! On Sept. 23, 2016, the FireEye Labs Advanced Reverse Engineering FLARE team will be hosting its third annual Flare-On reverse engineering contest with a designated start time of 8pm ET. This is a CTF-style challenge for all active and aspiring rever...

Announcing the Third Annual Flare-On Challenge

Let fall be the season for reverse engineering! On Sept. 23, 2016, the FireEye Labs Advanced Reverse Engineering FLARE team will be hosting its third annual Flare-On reverse engineering contest with a designated start time of 8pm ET. This is a CTF-style challenge for all active and aspiring rever...

Uji Countdown <= 2.0.6 - Cross-Site Scripting (XSS)

The Uji Countdown WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Uji Countdown 2.0.6 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Uji Countdown WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016 -----------------------------------------------------------------------...

WordPress Uji Countdown Plugin <= 2.0.6 - Cross-Site Scripting (XSS)

Because of this vulnerability, attackers can steal Administrators' session tokens, or perform arbitrary actions. Solution Update the plugin...

Jigsaw Ransomware Decryption Tool

Menacing ransomware called Jigsaw threatened to delete thousands of files an hour if victims didn’t pay 0.4 Bitcoins or $150. Worse, restarting your PC, according to the attackers, would also cost victims 1,000 deleted files. The icing on the cake was a menacing image of “Billy the Puppet” from t...

My Day - Countdown Timer - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Day - Countdown Timer published at the 'play' market has multiple vulnerabilities...

Holiday Countdown - External URLs, MIT license, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Holiday Countdown published at the 'play' market has multiple vulnerabilities...

Countdown Widget for Events - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Countdown Widget for Events published at the 'play' market has multiple vulnerabilities...

Countdown Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Countdown Widget published at the 'play' market has multiple vulnerabilities...

Sylvester Countdown 2017 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sylvester Countdown 2017 published at the 'play' market has multiple vulnerabilities...

Countdown Days - App & Widget - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Countdown Days - App & Widget published at the 'play' market has multiple vulnerabilities...

Big Days - Events Countdown - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Big Days - Events Countdown published at the 'play' market has multiple vulnerabilities...

Rise of the Raider Countdown - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rise of the Raider Countdown published at the 'play' market has multiple vulnerabilities...

Countdown - Watch Face - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Countdown - Watch Face published at the 'play' market has multiple vulnerabilities...

CoinVault Ransomware Betting on Hope with Free File Decrypt

UPDATE: A prior version of this story incorrectly defined VSS as vulnerability scanning systems when in fact it refers to volume shadow copy service, which is a Windows automatic data backup and recovery mechanism. Thanks to commenter Rudy for pointing this out. The courteous CoinVault ransomware...

CVE-2013-4383

Cross-site scripting XSS vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4383

Cross-site scripting XSS vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4383

CVE-2013-4383 describes a cross-site scripting (XSS) vulnerability in the jQuery Countdown module for Drupal (7.x-1.x). The root cause is insufficient sanitization of settings, allowing a user with the access administration pages permission to inject arbitrary script or HTML into a page via unspe...