CVE-2016-0623: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...

April 12, 2016 — KB3147461 (OS Build 10240.16769)

None None...

APK Installer - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application APK Installer published at the 'play' market has multiple vulnerabilities...

Installer - Install APK - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Installer - Install APK published at the 'play' market has multiple vulnerabilities...

InstaTV Pro Plugin Installer - Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application InstaTV Pro Plugin Installer published at the 'play' market has multiple vulnerabilities...

Apk Installer - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Apk Installer published at the 'play' market has multiple vulnerabilities...

Backpack Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Backpack Mod Installer published at the 'play' market has multiple vulnerabilities...

Portal Gun Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Portal Gun Mod Installer published at the 'play' market has multiple vulnerabilities...

Man In Iron Suit Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Man In Iron Suit Mod Installer published at the 'play' market has multiple vulnerabilities...

Craftable Eggs Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Craftable Eggs Mod Installer published at the 'play' market has multiple vulnerabilities...

Armor + Weapons Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Armor + Weapons Mod Installer published at the 'play' market has multiple vulnerabilities...

TNT Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TNT Mod Installer published at the 'play' market has multiple vulnerabilities...

Easy Installer - Apps On SD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Easy Installer - Apps On SD published at the 'play' market has multiple vulnerabilities...

March 8, 2016, update for Access 2016 (KB3114850)

None None...

March 8, 2016, update for Office 2016 (KB3114857)

None None...

Google Chrome Extensions UI Design Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the implementation of the Web Store inline-installer in the Extensions UI of Google Chrome prior to version 49.0.2623.75, which stems from the program's failure to limit the...

March 8, 2016, update for Project 2016 (KB3114865)

None None...

KeRanger OS X Ransomware Impact Likely Mitigated

It’s likely that the first functional ransomware for OS X is a dud. Discovered on Friday by researchers at Palo Alto Networks, the KeRanger ransomware sits dormant for three days before encrypting files from a comprehensive list of 300 file extensions; today would be Day 3. The malware was includ...

chromium-browser: origin confusion in Extensions UI

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...