Dangerous Mobile Banking Trojan Gets 'Keylogger' to Steal Everything

Cyber criminals are becoming more adept, innovative, and stealthy with each passing day. They have now shifted from traditional to more clandestine techniques that come with limitless attack vectors and are harder to detect. Security researchers have discovered that one of the most dangerous...

Pre-installed Trojan in Cheap Android Devices Steal Data, Intercept Chats

By Waqas Android devices are one of the most vulnerable mobile OS This is a post from HackRead.com Read the original post: Pre-installed Trojan in Cheap Android Devices Steal Data, Intercept Chats...

Restaurant Karaoke SHIDAX app for Android man-in-the-middle attack vulnerability

SHIDAX CORPORATION Restaurant Karaoke SHIDAX app for Android is a SHIDAX account management mobile application based on Android platform by SHIDAX CORPORATION in Japan. A security vulnerability exists in the Restaurant Karaoke SHIDAX app for Android 1.3.3 and earlier versions, which originates fr...

Google Detects Dangerous Spyware Apps On Android Play Store

Security researchers at Google have discovered a new family of deceptive Android spyware that can steal a whole lot of information on users, including text messages, emails, voice calls, photos, location data, and other files, and spy on them. Dubbed Lipizzan, the Android spyware appears to be...

IBM Rhapsody DM Redirection Vulnerability

IBM Rhapsody Design Manager DM is a suite of collaborative design management software from IBM. The software supports the use of centralized system repositories with Web-based access to store, share, search, and manage design models, as well as software to automate design reviews. A security...

cPanel Cross-Site Scripting Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A cross-site scripting vulnerability in the cPanel WHM Upload Locale interface allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...

TradeKing Forex for iPhone app for iOS Information Disclosure Vulnerability

TradeKing Forex for iPhone app for iOS is a highly customizable forex trading platform for iOS from TradeKing. A security vulnerability exists in version 1.2.1 of the TradeKing Forex for iPhone app for iOS, which is caused by the program failing to validate an X.509 certificate on the SSL server...

kitto cross-site scripting vulnerability

kitto is an interactive dashboard framework written using Elixir. A cross-site scripting vulnerability exists in the kitto 404 page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-16933)

Adobe Connect is web conferencing software. Adobe Connect suffers from a cross-site scripting vulnerability in its implementation, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack a user...

New Ransomware Threatens to Send Your Internet History & Private Pics to All Your Friends

After WannaCry and Petya ransomware outbreaks, a scary but rather creative new strain of ransomware is spreading via bogus apps on the Google Play Store, this time targeting Android mobile users. Dubbed LeakerLocker, the Android ransomware does not encrypt files on victim's device, unlike...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14389)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

SQL Injection Vulnerability in PHPSHE B2C Mall System v1.5

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy operation, practical features, quickly allow users to establish a personalized online store,...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

Elasticsearch Kibana Cross-Site Scripting Vulnerability (CNVD-2017-13258)

Elasticsearch Kibana is a suite of open source, browser-based tools for analyzing and searching Elasticsearch dashboards. A cross-site scripting vulnerability exists in Elasticsearch Kibana, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which...

EMC RSA Archer Cross-Site Scripting Vulnerability

EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site scripting vulnerability exists in EMC RSA Archer. A...

Ranzhi Synergy is vulnerable to XSS

Ranch Collaboration System is an open source collaborative office system for small and medium-sized businesses. Ranzhi Collaboration has an XSS vulnerability that can be exploited by attackers to gain administrator privileges, steal data, and so on...

CVE-2017-9593

The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9562

The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9594

The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9576

The "Middleton Community Bank Mobile Banking" by Middleton Community Bank app 3.0.0 -- aka middleton-community-bank-mobile-banking/id721843238 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi...