Sudoku des Tages - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Sudoku des Tages published at the 'play' market has multiple vulnerabilities...

Puzzle des Tages - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Puzzle des Tages published at the 'play' market has multiple vulnerabilities...

Gutschein des Tages - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Gutschein des Tages published at the 'play' market has multiple vulnerabilities...

Spiel des Lebens by Shuffle - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Spiel des Lebens by Shuffle published at the 'play' market has multiple vulnerabilities...

CVE-2015-8329

SAP Manufacturing Integration and Intelligence aka MII, formerly xMII uses weak encryption Base64 and DES, which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274...

protection-des-mains.com XSS vulnerability

Vulnerable URL: http://www.protection-des-mains.com//search/site/?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5074616 Google Pagerank| 1 VIP website status:| No Check...

comptoirdespapilles.com XSS vulnerability

Open Bug Bounty ID: OBB-97188 Description| Value ---|--- Affected Website:| comptoirdespapilles.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atelierdeschefs.fr XSS vulnerability

Vulnerable URL: https://www.atelierdeschefs.fr/fr/recettes-%3Csvg/onload=alert%28/XSSPOSED/%29%3E.php Details: Description| Value ---|--- Patched:| Yes, at 16.01.2017 Latest check for patch:| 16.01.2017 15:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24844...

Amazon Linux: Security Advisory (ALAS-2012-91)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft DES Encryption Security Advisory (3057154)

This host is missing an important security update according to Microsoft advisory 3057154. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS KB3057154: Update to harden use of DES encryption (3057154)

The remote Windows host is missing KB3057154, which hardens the use of DES encryption for secure communication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid84763; scriptversion"1.3"; scriptcvsdate"Date: 2018/11/15 20:50:32"; scriptxrefname:"MSKB", value:"3057154";...

Microsoft security advisory: Update to harden use of DES encryption: July 14, 2015

None None...

SAP MII - Encryption Downgrade vulnerability

Application: SAP MII Vendor URL: http://www.sap.com Bugs: Cryptographic issues Reported: 05.09.2015 Vendor response: 06.09.2015 Date of Public Advisory: 20.11.2015 Reference: SAP Security Note 2240274 Author: Mathieu GELI ERPScan VULNERABILITY INFORMATION Class: Cryptographic issues Impact: readi...

Security Audit Notes = Kerberos (krb5-1.13) issues - Advanced Information Security Corp

-=Advanced Information Security Corp=- Nicholas Lemonias Report Date: 3/4/2015 Email: [email protected] Introduction ============== During a source-code audit of the krb5-1.13 stable release 15 October 2014 implementation for linux; conducted internally by the Advanced Information Security...

Amazon Linux AMI : xorg-x11-server (ALAS-2015-470)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Important: xorg-x11-server

Issue Overview: Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

Majority of 4G USB Modems, SIM Cards Exploitable

Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...

Scientific Linux Security Update : xorg-x11-server on SL6.x, SL7.x i386/x86_64 (20141211)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64 (20141211)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

xorg-x11-server: denial of service due to unchecked malloc in client authentication

It was found that the X.Org server did not properly handle SUN-DES-1 Secure RPC authentication credentials. A malicious, unauthenticated client could use this flaw to crash the X.Org server by submitting a specially crafted authentication request...