4137 matches found
CVE-2016-3120
The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...
CVE-2016-3120
The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...
PT-2016-5374
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.13.6 MIT Kerberos 5 versions 1.4.x prior to 1.14.3 Description The issue is related to the validate as request function in kdc util.c within the Key Distribution Center KDC of MIT Kerberos 5. When restrict...
CVE-2016-3120: NULL Pointer Dereference
The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...
My Kyivstar - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application My Kyivstar published at the 'play' market has multiple vulnerabilities...
CVE-2016-3120
A NULL pointer dereference flaw was found in MIT Kerberos krb5kdc service. An authenticated attacker could use this flaw to cause krb5kdc to dereference a null pointer and crash by making an S4U2Self request, if the restrictanonymoustotgt option was set to true...
Link Celular - Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Link Celular published at the 'play' market has multiple vulnerabilities...
Ferrari Roadside Assistance - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ferrari Roadside Assistance published at the 'play' market has multiple vulnerabilities...
myAT&T Business - BSD license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application myAT&T Business published at the 'play' market has multiple vulnerabilities...
RNC 2016: Official App - Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application RNC 2016: Official App published at the 'play' market has multiple vulnerabilities...
DNC 2016 - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application DNC 2016 published at the 'play' market has multiple vulnerabilities...
ilp.mit.edu XSS vulnerability
Vulnerable URL: https://ilp.mit.edu/newsstory.jsp?id=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Here's How Riffle Anonymity Network Protects Your Privacy better than Tor
Online privacy is an Internet buzzword nowadays. If you are also concerned about the privacy of your web surfing, the most efficient way is to use TOR – a free software that lets users communicate anonymously by hiding their actual location from snoopers. Although TOR is a great anonymous network...
Peerio - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Peerio published at the 'play' market has multiple vulnerabilities...
On Pokemon and Privacy, Riffle, the Fiat Chrysler Bug Bounty Program, and More
Mike Mimoso and Chris Brook discuss the news of the week, including privacy and Pokemon GO, a new MIT anonymity system, the Fiat Chrysler bug bounty program, and a patched printer spooler vulnerability. Download: ThreatpostNewsWrapJuly152016.mp3 Music by Chris Gonsalves...
MIT Anonymity Network Riffle Promises Efficiency, Security
Researchers from MIT believe a new anonymity scheme they’ve devised dubbed Riffle could contend with Tor, claiming it’s every bit as secure as Tor, and bandwidth-efficient, to boot. According to a paper, “Riffle: An Efficient Communication System With Strong Anonymity,” .PDF released this week, t...
connect.mit.edu XSS vulnerability
Vulnerable URL: http://connect.mit.edu/directory?keywords=derp " Details: Description| Value ---|--- Patched:| Yes, at 24.01.2017 Latest check for patch:| 24.01.2017 00:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
КонсультантПлюс - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application КонсультантПлюс published at the 'play' market has multiple vulnerabilities...
MIT Kerberos 5 kadmind KADM5_POLICY Denial of Service (CVE-2015-8630)
A denial-of-service vulnerability exists in the MIT Kerberos 5 kadmind service. The vulnerability is due to a NULL pointer dereference when processing policy value. A remote, authenticated user who has permission to modify a principal entry can exploit this vulnerability by sending maliciously...