Multiple vulnerabilities fixed in Aruba networks products

Multiple vulnerabilities have been discovered in various Aruba Networks products including Instant and ArubaOS access points, the Airwave management platform and the PAPI protocol that these systems mutually use. Some vulnerabilities have been fixed, others will be fixed in a future update, and f...

Aruba Authentication Bypass / Insecure Transport / Tons Of Issues

Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities ------------------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices. The Vulnerabilities were discovered during a bla...

Coach.me - Instant Coaching - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Coach.me - Instant Coaching published at the 'play' market has multiple vulnerabilities...

Instant Buttons Voice Changer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Instant Buttons Voice Changer published at the 'play' market has multiple vulnerabilities...

Instant Translator (Translate) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Instant Translator Translate published at the 'play' market has multiple vulnerabilities...

Instant Button Mundo Canibal 2 - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Instant Button Mundo Canibal 2 published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerabilities in the functions instantservice.cc and searchtabhelper.cc of the Chrome Instant browser plugin of Google Chrome are related to deficiencies in access control. Exploiting these vulnerabilities can allow a malicious actor to bypass access restrictions...

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace the user interface.

The vulnerability of the Adobe Connect instant messaging program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the user interface...

The vulnerability of Adobe Connect’s instant messaging program allows a hacker to replace a user during the session.

The vulnerability of the Adobe Connect instant messaging program is related to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during the session...

[SECURITY] Fedora 23 Update: jabberd-2.3.3-7.fc23

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

Debian Security Advisory DSA 3486-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-1622 It was discovered that a maliciously crafted extension could bypass the Same Origin Policy. CVE-2016-1623 Mariusz Mlynski discovered a way to bypass the Same Origin Policy. CVE-2016-1624 lukezli discovered a...

chromium-browser: navigation bypass in Chrome Instant

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

Google Chrome Instant Feature Security Restriction Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 48.0.2564.109 due to the Chrome Instant feature not ensuring that NTP navigation targets are in the most frequently viewed or suggested list. A remote attacker can exploit...

CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

UBUNTU-CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...

CVE-2016-1625

The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...