PT-2017-19176

Name of the Vulnerable Software and Affected Versions OCaml compiler versions 4.04.0 through 4.04.1 Description The issue is related to insufficient sanitisation in the OCaml compiler, which allows external code to be executed with raised privilege in binaries marked as setuid. This can be achiev...

sharkPy - NSA Tool to Dissect, Analyze, and Interact with Network Packet Data using Wireshark and libpcap capabilities

A python module to dissect, analyze, and interact with network packet data as native Python objects using Wireshark and libpcap capabilities. sharkPy dissect modules extend and otherwise modify Wireshark's tshark. SharkPy packet injection and pcap file writing modules wrap useful libpcap...

MechBox - Open The Door Puzzle - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MechBox - Open The Door Puzzle published at the 'play' market has multiple vulnerabilities...

SuperTV OTT - BSD license, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SuperTV OTT published at the 'play' market has multiple vulnerabilities...

Metadata Analysis Draws its Own Conclusions on WannaCry Authors

The most intriguing mystery that remains about WannaCry is the identity of the attacker. The theory with the best legs is that North Korea’s Lazarus APT is the entity behind the worldwide ransomware outbreak given the discovery of shared code samples in the malware with older Lazarus attacks. Tha...

Clash Royale - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Clash Royale published at the 'play' market has multiple vulnerabilities...

DisplayLink Presenter - Native code usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application DisplayLink Presenter published at the 'play' market has multiple vulnerabilities...

Opera browser - latest news - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Opera browser - latest news published at the 'play' market has multiple vulnerabilities...

Android NVIDIA Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which NVIDIA Sound driver is a sound driver. An elevation of privilege vulnerability exists in the NVIDIA Sound driver in Android. An attacker can exploit this vulnerability to...

[SECURITY] Fedora 24 Update: oniguruma-5.9.6-4.fc24

Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...

[SECURITY] Fedora 26 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc26

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 59.0.3071.91, 59.0.3071.92 Platform version: 9460.60.0, 9460.60.2 for all Chrome OS devices except the Google Chromebook Pixel 2015. This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over...

[SECURITY] Fedora 24 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc24

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Clash of Clans - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Clans published at the 'play' market has multiple vulnerabilities...

Google Chrome: Fast & Secure - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Google Chrome: Fast & Secure published at the 'play' market has multiple vulnerabilities...

KeePassDroid - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application KeePassDroid published at the 'play' market has multiple vulnerabilities...

IKO - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application IKO published at the 'play' market has multiple vulnerabilities...

NetTV - ContentProvider mode not defined, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application NetTV published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 25 Update: chromium-native_client-58.0.3029.81-1.20170421gitc948e9b.fc25

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Recent Python Meterpreter Improvements

The Python Meterpreter has received quite a few improvements this year. In order to generate consistent results, we now use the same technique to determine the Windows version in both the Windows and Python instances of Meterpreter. Additionally, the native system language is now populated in the...