8977 matches found
Kids Mobile - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Kids Mobile published at the 'play' market has multiple vulnerabilities...
Tyrannosaurs - Native code usage, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Tyrannosaurs published at the 'play' market has multiple vulnerabilities...
Smurfs' Village - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Smurfs' Village published at the 'play' market has multiple vulnerabilities...
Gambino - Casino slot machines - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Gambino - Casino slot machines published at the 'play' market has multiple vulnerabilities...
Ski Safari 2 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ski Safari 2 published at the 'play' market has multiple vulnerabilities...
GPS Driving Route - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application GPS Driving Route published at the 'play' market has multiple vulnerabilities...
Baby Care - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Baby Care published at the 'play' market has multiple vulnerabilities...
DiceShaker 3D - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application DiceShaker 3D published at the 'play' market has multiple vulnerabilities...
Hacker Hijacks a Police Drone from 2 Km Away with $40 Kit
A researcher has demonstrated how easy it is to steal high-end drones, commonly deployed by government agencies and police forces, from 2 kilometres away with the help of less than $40 worth of hardware. The attack was developed by IBM security researcher Nils Rodday, who recently presented his...
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure disabling VoIP services by usi...
Vulnerability of Firefox and Firefox ESR browsers, which allows a hacker to forge the address bar
The vulnerability in the browser/base/content/browser.js function of Firefox and Firefox ESR is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to forge the URL address line remotely...
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger service failures such as dereferencing uninitialized pointers o...
Firefox browser vulnerabilities that allow a hacker to trigger a service failure or cause other effects
Multiple vulnerabilities in the dom/media/systemservices/CamerasChild.cpp function of the Firefox WebRTC browser implementation are caused by synchronization errors when using a shared resource. Exploitation of these vulnerabilities could allow a malicious actor to cause service failures or other...
Vulnerabilities in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, allow attackers to trigger service failures or execute arbitrary code.
The multiple vulnerabilities in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures or execute arbitrary code memory corruption, application...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
UBUNTU-CVE-2016-3679
Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...
Scientific Linux Security Update : git on SL6.x, SL7.x i386/x86_64 (20160323)
An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly,...
botan: multiple issues
CVE-2016-2849 ECDSA side channel: ECDSA and DSA signature algorithms perform a modular inverse on the signature nonce k. The modular inverse algorithm used had input dependent loops, and it is possible a side channel attack could recover sufficient information about the nonce to eventually...
Johns Hopkins Researchers: Crypto Flaws Endanger iMessage Integrity
When Apple released its iOS Security Guide for public consumption, it was an unprecedented look inside the security architecture behind its products. For cryptographer and professor Matthew Green and a team of four Johns Hopkins University graduate students, it was a road map to understanding not...
Mitre Tackles Its Critics: Set To Revamp CVE Vulnerability Reporting
Mitre Corporation will introduce a new pilot program for classifying Common Vulnerabilities and Exposures CVE in the coming weeks. The move is in response to a backlash in the security community where some critics contend Mitre is failing to keep pace with a massive influx in the number of report...