Solitaire Perfect Match - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire Perfect Match published at the 'play' market has multiple vulnerabilities...

Fluffy Shuffle - Match-3 Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Fluffy Shuffle - Match-3 Game published at the 'play' market has multiple vulnerabilities...

Play Pool Match 2015 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Play Pool Match 2015 published at the 'play' market has multiple vulnerabilities...

Color Match Cannons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Color Match Cannons published at the 'play' market has multiple vulnerabilities...

Modern Air Combat: Team Match - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Modern Air Combat: Team Match published at the 'play' market has multiple vulnerabilities...

EC 2016 Match schedule - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application EC 2016 Match schedule published at the 'play' market has multiple vulnerabilities...

W-Match : Chat & Dating App - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application W-Match : Chat & Dating App published at the 'play' market has multiple vulnerabilities...

Google Chrome Content Security Policy Access Restriction Bypass Vulnerability (CNVD-2015-07973)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the WebKit/Source/core/frame/csp/CSPSourceList.cpp file in the Content Security Policy CSP implementation of Google Chrome prior to version 47.0.2526.73 in the '...

CVE-2015-8382

The match function in pcreexec.c in PCRE before 8.37 mishandles the /?:abcd|?:?:?:?:abc|?:abcdefbabcdefghiabc|ACCEPT/ pattern and related patterns involving ACCEPT, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service partially initialized...

PCRE 'match' Function Information Disclosure Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in the 'match' function in the pcreexec.c file in versions of PCRE prior to 8.37, which stems from the...

PT-2015-7783

Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.37 Description The issue concerns the match function in pcre exec.c, which mishandles certain patterns involving ACCEPT, allowing remote attackers to obtain sensitive information from process memory or cause a denial o...

CVE-2009-3626

Perl 5.10.1 allows context-dependent attackers to cause a denial of service application crash via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match...

Oracle: Security Advisory (ELSA-2015-1439)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2676-1 nbd vulnerabilities

It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match and bypass access restrictions. This issue only affected Ubuntu 12.04 LTS. CVE-2013-6410 Tuomas Räsänen discovered that NBD incorrectly handled...

ansible -- multiple vulnerabilities

Ansible, Inc. reports: Ensure that hostnames match certificate names when using HTTPS - resolved in Ansible 1.9.2 Improper symlink handling in zone, jail, and chroot connection plugins could lead to escape from confined environment - resolved in Ansible 1.9.2...

CVE-2013-7398

main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client aka AHC or async-http-client before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

CVE-2013-7398: Insufficient Verification of Data Authenticity

main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client aka AHC or async-http-client before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

[SECURITY] Fedora 21 Update: armacycles-ad-0.2.8.3.3-1.fc21

In this game you ride a lightcycle; that is a sort of motorbike that cannot be stopped and leaves a wall behind it. The main goal of the game is to make your opponents' lightcycles crash into a wall while avoiding the same fate. The focus of the game lies on the multiplayer mode, but it provides...

Scientific Linux Security Update : wpa_supplicant on SL7.x x86_64 (20150611)

A buffer overflow flaw was found in the way wpasupplicant handled SSID information in the Wi-Fi Direct / P2P management frames. A specially crafted frame could allow an attacker within Wi-Fi radio range to cause wpasupplicant to crash or, possibly, execute arbitrary code. CVE-2015-1863 An integer...

PCRE 'match()' function stack buffer overflow vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A stack buffer overflow vulnerability exists in the PCRE 'match' function. An attacker could exploit this vulnerability to execute arbitra...