Sphero Edu - Coding for Sphero Robots - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sphero Edu - Coding for Sphero Robots published at the 'play' market has multiple vulnerabilities...

Barwa Banking Application - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Barwa Banking Application published at the 'play' market has multiple vulnerabilities...

Sberbank Mobile Banking - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sberbank Mobile Banking published at the 'play' market has multiple vulnerabilities...

cisr.mit.edu XSS vulnerability

Vulnerable URL: http://cisr.mit.edu/search/?query=1%22%27--!%3E%3CScript%20/K/%3Econfirm/OPENBUGBOUNTY/%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Ubuntu: Security Advisory (USN-3362-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3362-1: X.Org X server vulnerabilities

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. CVE-2017-10971 It was...

USN-3362-1 xorg-server, xorg-server-hwe-16.04, xorg-server-lts-xenial vulnerabilities

It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an administrator. CVE-2017-10971 It was...

Girls Who Code Week 2: Let the Coding Begin!!

The Akamai-sponsored Girls Who Code program is well under way! Week 2 featured lots of activity in the Girls Who Code classroom at Akamai's Cambridge, MA headquarters. The girls learned to use Scratch, a visual programming language that was developed at MIT to help people learn to code. They used...

NoiseCapture (Unreleased) - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NoiseCapture Unreleased published at the 'play' market has multiple vulnerabilities...

CVE-2017-11368

A denial of service flaw was found in MIT Kerberos krb5kdc service. An authenticated attacker could use this flaw to cause krb5kdc to exit with an assertion failure by making an invalid S4U2Self or S4U2Proxy request...

Tutanota: simply secure emails - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Tutanota: simply secure emails published at the 'play' market has multiple vulnerabilities...

csail.mit.edu XSS vulnerability

Open Bug Bounty ID: OBB-265455 Description| Value ---|--- Affected Website:| csail.mit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

To“hypnosis”to bypass authentication: an influence of the Kerberos Protocol for up to 20 years of vulnerabilities-vulnerability warning-the black bar safety net

! Kerberos this is a noun derived from the Greek mythology“the three heads of the dog--Hades the Keeper of the dog,”in the system is an authentication Protocol that uses tickets to allow nodes in an insecure network environment to communicate securely, it is possible to prevent eavesdropping, to...

WazCam - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WazCam published at the 'play' market has multiple vulnerabilities...

Debian DSA-3912-1 : heimdal - security update (Orpheus' Lyre)

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams reported that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, trusts metadata taken from the unauthenticated plaintext Ticket, rather than the authenticated and encrypted KDC response. A man-in-the-middle...

Samba 4.4.x < 4.4.15 / 4.5.x < 4.5.12 / 4.6.x < 4.6.6 KDC-REP Service Name Validation (Orpheus' Lyre)

The version of Samba running on the remote host is 4.4.x prior to 4.4.15, 4.5.x prior to 4.5.12, or 4.6.x prior to 4.6.6. It is, therefore, affected by a logic flaw in the Heimdal implementation of Kerberos, specifically within the krb5extractticket function within lib/krb5/ticket.c, due to the...

people.csail.mit.edu XSS vulnerability

Vulnerable URL: http://people.csail.mit.edu/jrb/Projects/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check fo...

[SECURITY] [DSA 3912-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 16, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3912-1 (heimdal - security update)

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams reported that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, trusts metadata taken from the unauthenticated plaintext Ticket, rather than the authenticated and encrypted KDC response. A man-in-the-middle...

Debian: Security Advisory (DSA-3912-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...