vBulletin decodeArguments serialized object vulnerability

Added: 04/15/2016 CVE: CVE-2015-7808 Background vBulletin is PHP software for building community websites. Problem A vulnerability in vBulletin 5 Connect allows remote attackers to execute arbitrary PHP code by placing a specially crafted serialized object in the arguments parameter to the...

Google Chrome Security Update 50.0.2662.75

Google on Wednesday pushed its third Chrome update since the beginning of March, patching a pair of high-severity vulnerabilities in the browser. Yesterday’s update brings Chrome to version 50.0.2662.75 and patched 20 vulnerabilities, according to the Google Chrome Releases blog. Eight of the bug...

Latest Flash Zero Day Being Used to Push Ransomware

Exploits for a zero-day vulnerability in Adobe Flash Player are being aggressively distributed in two exploit kits. The zero day, meanwhile, was patched by Adobe in an emergency update released Thursday night. Attackers are using the previously unpatched flaw in the maligned Flash Player to infec...

CVE-2016-1019: A New Flash Exploit Included in Magnitude Exploit Kit

On April 2, security researcher @Kafeine at Proofpoint discovered a change to the Magnitude Exploit Kit. Thanks to their collaboration, we analyzed the sample and discovered that Magnitude EK was exploiting a previously unknown vulnerability in Adobe Flash Player CVE-2016-1019. The in-the-wild...

Brain Training Day~brain power - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Brain Training Daybrain power published at the 'play' market has multiple vulnerabilities...

Valentine Wedding Day - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Valentine Wedding Day published at the 'play' market has multiple vulnerabilities...

Dream Wedding Day - Girls Game - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Dream Wedding Day - Girls Game published at the 'play' market has multiple vulnerabilities...

Baby Hazel Friendship Day - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Friendship Day published at the 'play' market has multiple vulnerabilities...

Baby Hazel Sports Day - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Sports Day published at the 'play' market has multiple vulnerabilities...

Firework Victory Day Simulator - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Firework Victory Day Simulator published at the 'play' market has multiple vulnerabilities...

Country Life: Harvest Day - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Country Life: Harvest Day published at the 'play' market has multiple vulnerabilities...

Race Day - Multiplayer Racing - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Race Day - Multiplayer Racing published at the 'play' market has multiple vulnerabilities...

Wedding Day SPA! Bride & Groom - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wedding Day SPA! Bride & Groom published at the 'play' market has multiple vulnerabilities...

Crazy Diner Day - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Diner Day published at the 'play' market has multiple vulnerabilities...

Happy Farm:Candy Day - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Happy Farm:Candy Day published at the 'play' market has multiple vulnerabilities...

Fashion Doll: Shopping Day SPA - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Doll: Shopping Day SPA published at the 'play' market has multiple vulnerabilities...

Marry Me - Perfect Wedding Day - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Marry Me - Perfect Wedding Day published at the 'play' market has multiple vulnerabilities...

Bingo Fever-Valentine's Day - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bingo Fever-Valentine's Day published at the 'play' market has multiple vulnerabilities...

Lucky Day - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Lucky Day published at the 'play' market has multiple vulnerabilities...

Wetter Deutschland - 15 tage - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Wetter Deutschland - 15 tage published at the 'play' market has multiple vulnerabilities...