Dance Party With The Hot Stars - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dance Party With The Hot Stars published at the 'play' market has multiple vulnerabilities...

Red Hot Fruits Delux - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Red Hot Fruits Delux published at the 'play' market has multiple vulnerabilities...

Red Hot Fruits - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Red Hot Fruits published at the 'play' market has multiple vulnerabilities...

Hot Dog Bush - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Hot Dog Bush published at the 'play' market has multiple vulnerabilities...

Hot or Not - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Hot or Not published at the 'play' market has multiple vulnerabilities...

Hot Girls - Beauty Girls - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hot Girls - Beauty Girls published at the 'play' market has multiple vulnerabilities...

Novell Filr Cross-Site Scripting Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site scripting vulnerability exists in version 1.2 prior to Novell Filr Hot Patch 4. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML via a specially crafte...

CVE-2015-5968

Cross-site scripting XSS vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

hottopic.com XSS vulnerability

Vulnerable URL: http://www.hottopic.com/product/dc-comics-batman-robin-for-president-t-shirt/10534761.html Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 12:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Warning — Popular 'Hot Patching' Technique Puts iOS Users At Risk

Do you know?… Any iOS app downloaded from Apple’s official App Store has an ability to update itself from any 3rd-party server automatically without your knowledge. Yes, it is possible, and you could end up downloading malware on your iPhone or iPad. Unlike Google, Apple has made remarkable effor...

Hot or Not? The Benefits and Risks of iOS Remote Hot Patching

Introduction Apple has made a significant effort to build and maintain a healthy and clean app ecosystem. The essential contributing component to this status quo is the App Store, which is protected by a thorough vetting process that scrutinizes all submitted applications. While the process is...

OpenSSH client Information Leak & Buffer Overflow

Since version 5.4 released on March 8, 2010, the OpenSSH client supports an undocumented feature called roaming: if the connection to an SSH server breaks unexpectedly, and if the server supports roaming as well, the client is able to reconnect to the server and resume the suspended SSH session...

SUSE-SU-2015:2053-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2053-2 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

hot-tea.se XSS vulnerability

Vulnerable URL: http://www.hot-tea.se/modules/paypal/about.php/"';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7058202 Google Pagerank| 0 VIP website...

secure.hotair.co.uk XSS vulnerability

Vulnerable URL: https://secure.hotair.co.uk/inflightphotophoto.asp?ph=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

SUSE SLED12 / SLES12 Security Update : xscreensaver (SUSE-SU-2015:2053-1)

The xscreensaver package was updated to fix the following security issue : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2015:2054-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security and non security issues: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch...

XScreenSaver Security Mechanism Bypass Vulnerability

XScreenSaver is a set of screensaver programs and screensaver framework for the X Window System. A security mechanism bypass vulnerability exists in versions of XScreenSaver prior to 5.34, which allows an attacker to bypass the lock screen by hot-plugging the monitor...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...