Android Keyboard App Could Swindle 40M Users Out of Millions

Researchers are warning users to delete a popular Android keyboard app that, once downloaded, makes unauthorized purchases of premium digital content. Google told Threatpost it has removed the app from its Google Play marketplace – but researchers say it was downloaded on at least 40 million phon...

Slims CMS Senayan Library Management System 7.0 Shell Upload

Exploit Title : Slims CMS Senayan Library Management System 7.0 Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Team Date : 13/02/2019 Vendor Homepage : slims.web.id Software Download Link : github.com/slims/...

Android HDCP Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android HDCP denial-of-service vulnerability exists because the encrypt interface provided by the HDCP service High-bandwidth Digital Content Protection does not perform strict paramet...

Cisco Digital Content Manager Message Handling Denial of Service Vulnerability

Cisco Digital Content Manager DCM is a digital content manager from Cisco USA. A security vulnerability exists in Cisco Digital Content Manager due to the program failing to effectively handle malformed ad messages from the server. An attacker is allowed to exploit this vulnerability to cause a...

Cisco Digital Content Manager Message Processing Denial of Service Vulnerability

A vulnerability in Cisco Digital Content Manager DCM could allow an unauthenticated, remote attacker to crash the system mainboard. The vulnerability is due to the DCM receiving malformed ad messages from the ad server, which could trigger a system reboot. An attacker could exploit this...

CVE-2014-7131

The Digital Content NewFronts 2014 aka com.coreapps.android.followme.newfronts2014 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7131

The Digital Content NewFronts 2014 aka com.coreapps.android.followme.newfronts2014 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7131

The CVE-2014-7131 entry concerns the Android app Digital Content NewFronts 2014 (com.coreapps.android.followme.newfronts2014) in version 6.0.7.6. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive inf...

ISPs will warn you about pirate content with Copyright Alert System

According to the Center for Copyright Information, the controversial "Copyright Alert System" will hit the U.S. within weeks. A blog post by Jill Lesser, executive director of the Center for Copyright Information, revealed the long-awaited Copyright Alert System CAS will begin "in the coming week...

MS00-038:Microsoft Media Encoder 拒绝服务漏洞

Windows Media Encoder是Windows Media Services的一部分。它是用来将数字内容转化为 Windows多媒体格式，以便通过运行在Windows NT或者Windows 2000上的多媒体服务程序发 送。 如果发送一个错误格式的请求给Windows Media Encoder,它就会出错崩溃，不能再将格式 化好的多媒体数据传送给Windoes Media Server. - Microsoft Windows Media Encoder 4.0 - Microsoft Windows Media Encoder 4.1 + Microsoft Windo...

Orb Detection

Orb is installed on the remote Windows host. Orb is a peer-to- peer file sharing application for 'mycasting' digital content from a PC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31651; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2001-0903

The CVE concerns the HDCP system where a linear key exchange process can be exploited to recover plaintext data, evade device blacklists, clone devices, and generate new device keyvectors by computing alternate authentication key combinations. Documents do not specify affected product/vendor vers...

CVE-2001-0903

Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...

Microsoft .NET Framework 3.5 SP1 Security Update for Windows Vista SP1 and Windows Server 2008 for x64-based Systems (KB979911)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...

Microsoft .NET Framework 1.1 SP1 Security Update for Windows Server 2003 x86 and Windows Server 2003 R2 x86 (KB979907)

A security issue has been identified that could allow an attacker to tamper with digitally signed content without being detected, when this content is being consumed by an application that makes use of the Microsoft .NET Framework on a Windows-based system. You can help protect your computer by...