Design/Logic Flaw

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression...

CVE-2013-3647

The CVE-2013-3647 entry describes a WebView vulnerability in Cybozu Live for Android (pre-2.0.1) where a crafted file:// URL can execute arbitrary JavaScript and disclose data. Root cause ties to a CVE-2012-4009 regression. Exploitation discussed via malicious files on the device; remediation adv...

CVE-2013-3647

The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because...

CVE-2013-3646

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression...

CVE-2013-3646

The CVE-2013-3646 entry maps to Cybozu Live for Android prior to version 2.0.1, where an arbitrary Java method execution vulnerability exists. The underlying issue is a regression from CVE-2012-4008 that allows remote attackers to cause the app to execute crafted Java methods via a malicious webs...

Cybozu Live for Android vulnerable in the WebView class

Overview Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains a vulnerability in the WebView class. Note that this vulnerability is a regression in version 2.0.0 of the issue in JVN77393797. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported...

Cybozu Live for Android vulnerable to arbitrary Java method execution

Overview Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Note that this vulnerability is a regression in version 2.0.0 of the issue in JVN23009798. Gaku Mochizuki of Mitsui Bussan Secure Directions,...

JVN#19740283: Cybozu Live for Android vulnerable in the WebView class

Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains a vulnerability in the WebView class. Note that this vulnerability is a regression in version 2.0.0 of the issue in JVN77393797. Impact When there is a malicious file in the user's Android device,...

JVN#63428218: Cybozu Live for Android vulnerable to arbitrary Java method execution

Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Note that this vulnerability is a regression in version 2.0.0 of the issue in JVN23009798. Impact When opening a specially crafted website, an attacker...

[SECURITY] Fedora 19 Update: livecd-tools-19.4-1.fc19

Tools for generating live CDs on Fedora based systems including derived distributions such as RHEL, CentOS and others. See http://fedoraproject.org/wiki/FedoraLiveCD for more details...

[SECURITY] Fedora 17 Update: livecd-tools-17.17-1.fc17

Tools for generating live CDs on Fedora based systems including derived distributions such as RHEL, CentOS and others. See http://fedoraproject.org/wiki/FedoraLiveCD for more details...

Russian hacker illegally ported Xbox LIVE Arcade Game to PC

A Russian hacker who goes by the handle "Barabus" on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: "This is not piracy, this is restoration of justice. Th...

Russian hacker illegally ported Xbox LIVE Arcade Game to PC

A Russian hacker who goes by the handle “Barabus” on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: “This is not piracy, this is restoration of justice. Th...

AndroRat - Remote Administration Tool for Android

Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. It has been realised in one month. The goal of t...

[Sandcat Browser 4.0] The fastest web browser with many useful security and developer oriented tools

Sandcat Browser, The fastest web browser with many useful security and developer oriented tools updated to version 4.0 with the fastest scripting language packed with features for pen-testers. Sandcat 4 adds a large number of enhancements, new features, extensions and bug fixes, and provides a...

Sandcat Browser 4.0 released, new tools added for Pen-Testers

Sandcat Browser, The fastest web browser with many useful security and developer oriented tools updated to version 4.0 with the fastest scripting language packed with features for pen-testers. Sandcat 4 adds a large number of enhancements, new features, extensions and bug fixes, and provides a...

Sandcat Browser 4.0 released, new tools added for Pen-Testers

Sandcat Browser, The fastest web browser with many useful security and developer oriented tools updated to version 4.0 with the fastest scripting language packed with features for pen-testers. Sandcat 4 adds a large number of enhancements, new features, extensions and bug fixes, and provides a...

Windows Live Essentials Version Detection

Detects the installed version of Windows Live Essentials on Windows. The script logs in via smb, searches for Windows Live Essentials in the registry, gets the from registry. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Microsoft Windows Essentials Installed

Windows Essentials formerly Windows Live Essentials and Windows Live Installer is installed on the remote host. Windows Essentials is a suite of applications for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66420; scriptversion"1.8";...

Windows Live Essentials Improper URI Handling Vulnerability (MS13-045; CVE-2013-0096)

An information disclosure vulnerability exists when Windows Live Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited this vulnerability could perform various actions on behalf of the logged-on user. These actions include the ability to overwrite files a...