Craftable Eggs Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Craftable Eggs Mod Installer published at the 'play' market has multiple vulnerabilities...

Armor + Weapons Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Armor + Weapons Mod Installer published at the 'play' market has multiple vulnerabilities...

TNT Mod Installer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TNT Mod Installer published at the 'play' market has multiple vulnerabilities...

Easy Installer - Apps On SD - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Easy Installer - Apps On SD published at the 'play' market has multiple vulnerabilities...

Google Chrome Extensions UI Design Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the implementation of the Web Store inline-installer in the Extensions UI of Google Chrome prior to version 49.0.2623.75, which stems from the program's failure to limit the...

March 8, 2016, update for Access 2016 (KB3114850)

None None...

March 8, 2016, update for Project 2016 (KB3114865)

None None...

March 8, 2016, update for Office 2016 (KB3114857)

None None...

KeRanger OS X Ransomware Impact Likely Mitigated

It’s likely that the first functional ransomware for OS X is a dud. Discovered on Friday by researchers at Palo Alto Networks, the KeRanger ransomware sits dormant for three days before encrypting files from a comprehensive list of 300 file extensions; today would be Day 3. The malware was includ...

chromium-browser: origin confusion in Extensions UI

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

Design/Logic Flaw

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

UBUNTU-CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

CVE-2016-1640 affects Google Chrome’s Web Store inline-installer in Extensions UI. The vulnerability arises because installations are not blocked when an installation frame is deleted, enabling a remote site to trick a user into thinking a request comes from their next navigation target. A fixed ...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

CVE-2016-1640: Undefined Security Weakness

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0008) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows a remote attacker to read arbitrary files. CVE-2011-0426 - An information disclosure vulnerability exists due to...