App of the Day - 100% Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application App of the Day - 100% Free published at the 'play' market has multiple vulnerabilities...

30 Day Chest Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Chest Challenge FREE published at the 'play' market has multiple vulnerabilities...

30 Day Push Up Challenge - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Push Up Challenge published at the 'play' market has multiple vulnerabilities...

30 Day Back Challenge FREE - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Back Challenge FREE published at the 'play' market has multiple vulnerabilities...

New York City Night & Day Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application New York City Night & Day Free published at the 'play' market has multiple vulnerabilities...

Apple Mac OS X Zero Day Vulnerability SIP Bypass

System Integrity Protection SIP was implemented in OS X El Capitan and imposes limitations on what actions that Mac computers’ root accounts can take against protected paths of the operating system. Yesterday at the SysCan360 conference in Singapore, a researcher from SentinelOne disclosed detail...

Mac OS X Zero-Day Exploit Can Bypass Apple's Latest Protection Feature

A critical zero-day vulnerability has been discovered in all versions of Apple's OS X operating system that allows hackers to exploit the company’s newest protection feature and steal sensitive data from affected devices. With the release of OS X El Capitan, Apple introduced a security protection...

The study found: the majority of software vulnerabilities are on the day there is a patch-vulnerability warning-the black bar safety net

Each year, the IT industry a number of manufacturers of a variety of software products in total will find a myriad of vulnerabilities. Software company Flexera Software's computer security research Department of Secunia Research annually publish the vulnerabilities of the assessment report. ! 2 0...

An iOS 0-day will lead to iCloud photos and videos in crack-vulnerability warning-the black bar safety net

There is a bad news, the Johns Hopkins University's Matthew Green, a Professor in the iOS encryption system found a 0-day vulnerability, which could allow a skilled attacker to intercept and decipher iMessages on. However, the good news is that this vulnerability is hard to exploit. Green explain...

Pwn2Own Day Two: Safari, Microsoft Edge Go Down Winner Announced

In the end, it was a nail-biter pitting Tencent Security Team Sniper KeenLab and PC Manager against JungHoon Lee lokihardt for the title of Master of Pwn for Pwn2Own 2016. After a tense last two minutes of the competition, it was Tencent Security Team Sniper and its successful code execution of a...

Here's How Hackers Stole $80 Million from Bangladesh Bank

The recent cyber attack on Bangladesh's central bank that let hackers stole over $80 Million from the institutes' Federal Reserve bank account was reportedly caused due to the Malware installed on the Bank's computer systems. Few days ago, reports emerged of a group of unknown hackers that broke...

Use-after-free in SetBody — Mozilla

Security researcher lokihardt, working with HP's Zero Day Initiative, reported a use-after-free issue in the SetBody function of HTMLDocument. This results in a potentially exploitable crash...

Use-after-free in HTML5 string parser — Mozilla

Security researcher ca0nguyen, working with HP's Zero Day Initiative, reported a use-after-free issue in the HTML5 string parser when parsing a particular set of table-related tags in a foreign fragment context such as SVG. This results in a potentially exploitable crash...

Angler Exploit Kit Attacks Silverlight Vulnerability

Exploits for a vulnerability in Microsoft Silverlight have found their way into the dangerous Angler Exploit Kit a little more than a month after it was patched. French security researcher Kafeine said he was able to get independent confirmation from researchers at Kaspersky Lab that the exploit...

Cisco ASA VPN Portal Cross Site Scripting

Exploit author: Juan Sacco - [email protected] Affected program: Cisco ASA VPN Portal - Zero Day Cisco ASA VPN is prone to a XSS on the password recovery page. This vulnerability can be used by an attacker to capture other user's credentials. The password recovery form fails to filter proper...

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin...

julietsdayspa.com XSS vulnerability

Vulnerable URL: https://www.julietsdayspa.com/products/makeup/mcategory.php?txtTitle=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

They Named it — Einstein, But $6 Billion Firewall Fails to Detect 94% of Latest Threats

The US government's $6 Billion firewall is nothing but a big blunder. Dubbed EINSTEIN, the nationwide firewall run by the US Department of Homeland Security DHS is not as smart as its name suggests. An audit conducted by the United States Government Accountability Office GAO has claimed that the...

ACTi E31 surveillance Cameras 弱密码漏洞

Introduction The Perception Point Research team has identified a 0-day local privilege escalation vulnerability in the Linux kernel. While the vulnerability has existed since 2012, our team discovered the vulnerability only recently, disclosed the details to the Kernel security team, and later...

On the Linux Zero Day, Twitter Users Looking for Answers, and Bot Fraud

Mike Mimoso and Chris Brook discuss the week in news, including the Linux zero day–how it was patched in Android, Twitter users sent nation state messages that are still looking for answers, and bot fraud. Download: ThreatpostNewsWrapJanuary222016.mp3 Music by Chris Gonsalves...