CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

Null pointer dereference

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

CVE-2016-3120

The vulnerability CVE-2016-3120 affects MIT Kerberos 5 KDC (krb5) where the validate_as_request function in kdc_util.c uses an incorrect client data structure when restrict_anonymous_to_tgt is enabled. This can let remote authenticated users trigger a NULL pointer dereference and crash the krb5 K...

CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

My Kyivstar - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application My Kyivstar published at the 'play' market has multiple vulnerabilities...

CVE-2016-3120

A NULL pointer dereference flaw was found in MIT Kerberos krb5kdc service. An authenticated attacker could use this flaw to cause krb5kdc to dereference a null pointer and crash by making an S4U2Self request, if the restrictanonymoustotgt option was set to true...

Link Celular - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Link Celular published at the 'play' market has multiple vulnerabilities...

Ferrari Roadside Assistance - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ferrari Roadside Assistance published at the 'play' market has multiple vulnerabilities...

myAT&T Business - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application myAT&T Business published at the 'play' market has multiple vulnerabilities...

RNC 2016: Official App - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application RNC 2016: Official App published at the 'play' market has multiple vulnerabilities...

DNC 2016 - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DNC 2016 published at the 'play' market has multiple vulnerabilities...

ilp.mit.edu XSS vulnerability

Vulnerable URL: https://ilp.mit.edu/newsstory.jsp?id=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Here's How Riffle Anonymity Network Protects Your Privacy better than Tor

Online privacy is an Internet buzzword nowadays. If you are also concerned about the privacy of your web surfing, the most efficient way is to use TOR – a free software that lets users communicate anonymously by hiding their actual location from snoopers. Although TOR is a great anonymous network...

Peerio - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Peerio published at the 'play' market has multiple vulnerabilities...

On Pokemon and Privacy, Riffle, the Fiat Chrysler Bug Bounty Program, and More

Mike Mimoso and Chris Brook discuss the news of the week, including privacy and Pokemon GO, a new MIT anonymity system, the Fiat Chrysler bug bounty program, and a patched printer spooler vulnerability. Download: ThreatpostNewsWrapJuly152016.mp3 Music by Chris Gonsalves...

MIT Anonymity Network Riffle Promises Efficiency, Security

Researchers from MIT believe a new anonymity scheme they’ve devised dubbed Riffle could contend with Tor, claiming it’s every bit as secure as Tor, and bandwidth-efficient, to boot. According to a paper, “Riffle: An Efficient Communication System With Strong Anonymity,” .PDF released this week, t...

connect.mit.edu XSS vulnerability

Vulnerable URL: http://connect.mit.edu/directory?keywords=derp " Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 00:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...