Kung Fu Do Fighting - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kung Fu Do Fighting published at the 'play' market has multiple vulnerabilities...

Any.do: To-Do List, Task List - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Any.do: To-Do List, Task List published at the 'play' market has multiple vulnerabilities...

Wunderlist: To-Do List & Tasks - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wunderlist: To-Do List & Tasks published at the 'play' market has multiple vulnerabilities...

Do it (Tomorrow) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Do it Tomorrow published at the 'play' market has multiple vulnerabilities...

To Do Reminder - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application To Do Reminder published at the 'play' market has multiple vulnerabilities...

Chaos Control - GTD To-Do List - Corrupted files, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Chaos Control - GTD To-Do List published at the 'play' market has multiple vulnerabilities...

Ultimate To-Do List - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate To-Do List published at the 'play' market has multiple vulnerabilities...

CVE-2016-0717

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate is a reservation duplicate of CVE-2016-0729. Notes: All CVE users should reference CVE-2016-0729 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2015-7681

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn. Notes: none...

Quassel Denial of Service Vulnerability (CNVD-2016-00244)

Quassel is a cross-platform distributed IRC chat client developed by Quassel IRC team , it uses QT application framework development , PostgreSQL database to store data . A security vulnerability exists in the 'CoreUserInputHandler::doMode' class in Quassel's core/coreuserinputhandler.cpp file,...

WordPress NEX-Forms Lite Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . NEX-Forms Lite is one of the user-defined plugin to create forms . A cross-site scripting vulnerability exists in...

Threat Outbreak Alert RuleID20161: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42783 First Published: 2015 December 21 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20161 may contain the following files: Name |...

Mozilla 42 Brings Private Browsing with Tracking Protection Live

Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately. The feature, Private Browsing with Tracking Protection, previously available to beta users, blocks third party page elements, such as ads, social network buttons, analytics, and...

Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=525 Fuzzing packed executables found the attached crash, it might be usable as an information leak as part of another bug, so filing as a low-risk bug. If I had to guess, I would say this is the ExeCryptor unpacker...

File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted

Overview File encyption software "ED" contains an issue when files of small size are encyrpted, they may become easier to decipher in comparison to when files of a larger size are encrypted. When encrypting small files that are smaller than the block size 128 bits, file encryption software "ED"...

CVE-2015-5192

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5195. Reason: This candidate is a reservation duplicate of CVE-2015-5195. Notes: All CVE users should reference CVE-2015-5195 instead of this candidate. All references and descriptions in this candidate have been removed to...

Privacy Badger 1.0 Released With Support For EFF Do Not Track Policy

The EFF has released the 1.0 version of Privacy Badger, its browser extension that blocks the hidden trackers used on many sites to follow users around the Web. The extension has been out in beta form for several months and has drawn praise from privacy advocates for its ability to block trackers...

EFF, AdBlock and Others Launch New Do Not Track Standard

After years of discussions, disagreements, and digressions, the Do Not Track header is supported by all of the major browsers. But because there’s no real requirement for sites or advertisers to respect it, DNT is not as effective as it could be. Now, the EFF, Disconnect, and several other...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/create/ajax_do.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/create/ajaxdo.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

JBoss RichFaces vulnerable to remote Java code execution

Overview JBoss RichFaces contains a remote Java code execution vulnerability. JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces JSF. JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Takeshi Terada of Mitsui...