Word Hunt - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Word Hunt published at the 'play' market has multiple vulnerabilities...

Dino Jungle Hunt - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dino Jungle Hunt published at the 'play' market has multiple vulnerabilities...

Prop Hunt Multiplayer Free - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Prop Hunt Multiplayer Free published at the 'play' market has multiple vulnerabilities...

Prop Hunt Portable - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Prop Hunt Portable published at the 'play' market has multiple vulnerabilities...

The Hunt - Style & Shopping - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Hunt - Style & Shopping published at the 'play' market has multiple vulnerabilities...

Troy Hunt Explains Nissan Leaf Car Hack

Last month, when researcher Troy Hunt argued the dangers of insecure APIs at a security workshop, little did he know hours later he would discover an API vulnerability that allowed remote access to onboard computers of 200,000 Nissan Leaf and eNV200 electric automobiles. “After talking about the...

Microsoft Project Spartan bug bounty launched

Microsoft today kicked off a two-month bug hunt for vulnerabilities in Project Spartan, the company’s new browser set to launch alongside Windows 10 later this year, one of several announced additions to its various bounty programs. “Microsoft’s new browser will be the onramp to the Internet for...

CVE-2014-7118

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7118

The CVE-2014-7118 entry concerns the Itography Item Hunt (com.itography.application) Android app version 3.0.3, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certi...

CVE-2014-7118

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

TESCO Customers' account details leaked online

You all were busy in celebrating Valentine’s Day with your loved ones, and the cyber criminals were too celebrating the day in their own way, and this time, with the TESCO customers. A list of over 2,240 Tesco.com Internet Shopping accounts was posted Online on the Pastebin website by some unknow...

Hunt CCTV DVR.cfg Direct Request Information Disclosure

The remote web server appears to be part of a digital video recorder DVR, such as models of Hunt CCTV, that is affected by an information disclosure vulnerability. Specifically, an unauthenticated remote attacker can retrieve the device's configuration file, 'DVR.cfg', which contains sensitive...

Multiple Hunt CCTV - Information Disclosure

Multiple Hunt CCTV - Information Disclosure source: https://www.securityfocus.com/bid/57579/info Multiple Hunt CCTV devices are prone to a remote information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in...

Multiple Hunt CCTV - Information Disclosure

source: https://www.securityfocus.com/bid/57579/info Multiple Hunt CCTV devices are prone to a remote information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as credentials, that may aid in further attacks. curl -v...

Hunt CCTV Credential Disclosure

Hunt CCTV and generics brands Insufficient Authentication January 17, 2013 - A. Ramos -- CVE ID: CVE-2013-1391 reserved -- Affected Vendors: Hunt CCTV http://www.huntcctv.com/ generic brands from Hunt Capture CCTV http://www.capturecctv.ca/ NoVus CCTV http://www.novuscctv.com/ Well-Vision Inc...

Yahoo! PH Purple Hunt 2.0 Ad Compromised !

Yahoo! PH Purple Hunt 2.0 Ad Compromised ! Earlier the other day, I was browsing through the Yahoo! PH site and the Yahoo! Purple Hunt 2.0 ad caught my attention. Curious as I am, I clicked on the ad and surprisingly my browser downloaded a suspicious file named com.com. Apparently this ad...

Microsoft Media Player - quartz.dll .wav Multiple Remote Denial of Service Vulnerabilities

Microsoft Media Player - quartz.dll .wav Multiple Remote Denial of Service Vulnerabilities ! /usr/bin/perl CAL2quartzwavpoc.pl TwoMircoSoftMediaplayerquartz.dllwavremoteDosvulnerabilities by Code Audit Labs public 2009-04-19 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp...