Next Generation Penetration Testing Distro: Cyborg Hawk

Next Generation Penetration Testing Distro The world’s most advanced, powerful and yet beautiful penetration testing distribution ever created.Lined up with ultimate collection of tools for pro Ethical Hackers and Cyber Security Experts. Simplify security in your IT infrastructure with Cyborg. It...

DoubleDirect MitM Attack Targets Android, iOS and OS X Users

Security researchers have discovered a new type of "Man-in-the-Middle" MitM attack in the wild targeting smartphone and tablets users on devices running either iOS or Android around the world. The MitM attack, dubbed DoubleDirect, enables an attacker to redirect a victim’s traffic of major websit...

ZeroNights 2014: запретных тем нет

ZeroNights 2014: запретных тем нет До старта конференции ZeroNights 2014 остается совсем немного времени. Скоро площадка для встречи специалистов-практиков по ИБ, исследователей, программистов, звезд хакерского мира, да и просто хороших друзей и знакомых откроет свои двери навстречу новому. В это...

WebKit memory corruption exploit bloopers-vulnerability warning-the black bar safety net

WebKit is currently the most widely used Web rendering engine, whether it is a mainstream browser, Safari, Chrome, etc., the system built-in apps Mail, Dashboard, etc., the mobile end of the various third-party applications, paid, chat, social applications, etc. basically all with the WebKit...

CVE-2014-5672

The NQ Mobile Security & Antivirus aka com.nqmobile.antivirus20 application 7.2.16.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5642

The IMPI Mobile Security aka com.impi application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5565

The GadgetTrak Mobile Security aka com.activetrak.android.app application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The IMPI Mobile Security aka com.impi application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GadgetTrak Mobile Security aka com.activetrak.android.app application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5672

The NQ Mobile Security & Antivirus aka com.nqmobile.antivirus20 application 7.2.16.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5565

The CVE-2014-5565 entry concerns GadgetTrak Mobile Security (package com.activetrak.android.app) for Android, version 1.6, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5642

The CVE-2014-5642 entry concerns the IMPI Mobile Security Android app (com.impi) version 2.1.0, where SSL/TLS connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The vulnerab...

CVE-2014-5565

The GadgetTrak Mobile Security aka com.activetrak.android.app application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5642

The IMPI Mobile Security aka com.impi application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5672: Undefined Security Weakness

The NQ Mobile Security & Antivirus aka com.nqmobile.antivirus20 application 7.2.16.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5565: Undefined Security Weakness

The GadgetTrak Mobile Security aka com.activetrak.android.app application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6550

Name of the Vulnerable Software and Affected Versions GadgetTrak Mobile Security aka com.activetrak.android.app version 1.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.50...

CVE-2014-5642: Undefined Security Weakness

The IMPI Mobile Security aka com.impi application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6627

Name of the Vulnerable Software and Affected Versions IMPI Mobile Security aka com.impi version 2.1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SS...

PT-2014-6657

Name of the Vulnerable Software and Affected Versions NQ Mobile Security & Antivirus version 7.2.16.00 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from S...