Kung Fu Do Fighting - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kung Fu Do Fighting published at the 'play' market has multiple vulnerabilities...

Any.do: To-Do List, Task List - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Any.do: To-Do List, Task List published at the 'play' market has multiple vulnerabilities...

Wunderlist: To-Do List & Tasks - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wunderlist: To-Do List & Tasks published at the 'play' market has multiple vulnerabilities...

Do it (Tomorrow) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Do it Tomorrow published at the 'play' market has multiple vulnerabilities...

To Do Reminder - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application To Do Reminder published at the 'play' market has multiple vulnerabilities...

Chaos Control - GTD To-Do List - Corrupted files, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Chaos Control - GTD To-Do List published at the 'play' market has multiple vulnerabilities...

Ultimate To-Do List - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ultimate To-Do List published at the 'play' market has multiple vulnerabilities...

CVE-2016-0717

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate is a reservation duplicate of CVE-2016-0729. Notes: All CVE users should reference CVE-2016-0729 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2015-7681

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn. Notes: none...

Quassel Denial of Service Vulnerability (CNVD-2016-00244)

Quassel is a cross-platform distributed IRC chat client developed by Quassel IRC team , it uses QT application framework development , PostgreSQL database to store data . A security vulnerability exists in the 'CoreUserInputHandler::doMode' class in Quassel's core/coreuserinputhandler.cpp file,...

WordPress NEX-Forms Lite Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . NEX-Forms Lite is one of the user-defined plugin to create forms . A cross-site scripting vulnerability exists in...

PT-2016-3497

Name of the Vulnerable Software and Affected Versions NEX-Forms Lite plugin version 2.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the form fields parameter in a 1 do edit or 2 do insert action to the "/wp-admin/admin-ajax.php" API...

Threat Outbreak Alert RuleID20161: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42783 First Published: 2015 December 21 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20161 may contain the following files: Name |...

PT-2015-5223

Name of the Vulnerable Software and Affected Versions LXCFS versions prior to 0.12 Description The issue arises from the do write pids function in lxcfs.c, which fails to properly check permissions. This allows local users to gain privileges by writing a pid to the tasks file. Recommendations For...

Mozilla 42 Brings Private Browsing with Tracking Protection Live

Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately. The feature, Private Browsing with Tracking Protection, previously available to beta users, blocks third party page elements, such as ads, social network buttons, analytics, and...

PT-2015-7684

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.6.x Description The issue allows local guests to cause a denial of service via a sequence of crafted hypercalls, specifically HYPERCALL xenoprof op or HYPERVISOR xenpmu op, which are not properly handled in the do...

Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=525 Fuzzing packed executables found the attached crash, it might be usable as an information leak as part of another bug, so filing as a low-risk bug. If I had to guess, I would say this is the ExeCryptor unpacker...

File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted

Overview File encyption software "ED" contains an issue when files of small size are encyrpted, they may become easier to decipher in comparison to when files of a larger size are encrypted. When encrypting small files that are smaller than the block size 128 bits, file encryption software "ED"...

CVE-2015-5192

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5195. Reason: This candidate is a reservation duplicate of CVE-2015-5195. Notes: All CVE users should reference CVE-2015-5195 instead of this candidate. All references and descriptions in this candidate have been removed to...

Privacy Badger 1.0 Released With Support For EFF Do Not Track Policy

The EFF has released the 1.0 version of Privacy Badger, its browser extension that blocks the hidden trackers used on many sites to follow users around the Web. The extension has been out in beta form for several months and has drawn praise from privacy advocates for its ability to block trackers...