PT-2016-5970

Name of the Vulnerable Software and Affected Versions wpa supplicant versions 0.4.0 through 2.5 Description The issue allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service, via a crafted command. This is possible because wpa...

CVE-2016-4477: Undefined Security Weakness

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

CVE-2015-5207: Improper Access Control

Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods...

UBUNTU-CVE-2016-4477

wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service daemon outage, via a crafted 1 SET, 2 SETCRED, or 3 SETNETWORK command...

Apache Cordova iOS Malicious Resource Loading Vulnerability

Apache Cordova iOS is a platform for developing iOS-based mobile applications using HTML, CSS and JavaScript, and is the core engine that drives PhoneGap. A security vulnerability exists in Apache Cordova iOS that allows remote attackers to load malicious resources by exploiting a method that can...

DLA-450-1 gdk-pixbuf - security update

Bulletin has no description...

Cisco WebEx Productivity Tools Search Path Handling Vulnerability

Cisco WebEx Productivity Tools is a set of tools for adding a user's application to a WebEx Meetings session. Cisco WebEx Productivity Tools fails to handle search paths correctly, allowing local attackers to build multiple malicious cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll,...

Nail Salon 2 - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Nail Salon 2 published at the 'play' market has multiple vulnerabilities...

Microsoft .NET Framework Privilege Escalation

The vulnerability of the Microsoft .NET Framework software platform is related to improper handling of library loading. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Internet Explorer Privilege Escalation

The vulnerability of the Internet Explorer browser is related to errors during the loading of DLLs. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

IRCTC Connect - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application IRCTC Connect published at the 'play' market has multiple vulnerabilities...

Skyscanner – Car Rentals - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Skyscanner – Car Rentals published at the 'play' market has multiple vulnerabilities...

MyFreeZoo Mobile - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MyFreeZoo Mobile published at the 'play' market has multiple vulnerabilities...

Okey Plus - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Okey Plus published at the 'play' market has multiple vulnerabilities...

Waterfall Photo Frames - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Waterfall Photo Frames published at the 'play' market has multiple vulnerabilities...

Microsoft .NET Framework Remote Code Execution Vulnerability (CNVD-2016-02244)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

CVE-2016-0160

Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."...

CVE-2016-0160

Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

CVE-2016-0148

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...