Schneider Electric Conext ComBox

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Conext ComBox Vulnerability: Resource Exhaustion AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following Conext ComBox solar battery monitor: Conext...

DONAUKURIER E-Paper - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DONAUKURIER E-Paper published at the 'play' market has multiple vulnerabilities...

Dropbox Paper Beta - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dropbox Paper Beta published at the 'play' market has multiple vulnerabilities...

ijsrp.org XSS vulnerability

Vulnerable URL: http://www.ijsrp.org/research-paper-0814.php?rp=P323049' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100568 VIP website status:| No Check ijsrp.org SSL...

No payment necessary: Fighting back against ransomware

Note: Read our latest comprehensive report on ransomware: Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene. Any IT professional who’s ever had an experience with malware knows how fast an intrusive attack can happen, and how difficult it can be to educate...

Weak Password Vulnerability in Some Interfaces of China Mobile's Mobile Client

China Mobile Mobile Client is a mobile application launched by China Mobile. A weak password vulnerability exists in some interfaces of the China Mobile mobile client. Since the post data is obtained by reversing the apk using "Eastern=! @$%^&=World" as the password, using 3 des encryption, no...

Increased Use of WMI for Environment Detection and Evasion

Introduction Throughout the past few months, FireEye Labs has observed an increased use of Windows Management Instrumentation WMI queries for environment detection and evasion of dynamic analysis and virtualization engines. WMI provides high-level interaction with Windows objects using C/C++,...

EFF Files Lawsuit Challenging DMCA's Restrictions Security Researchers

The Electronic Frontier Foundation filed a lawsuit Thursday against the U.S. Government over a provision within the Digital Millennium Copyright Act that it says impinges on free speech and hobbles security researchers ability to do their job. The lawsuit asks the court to strike down the highly...

helpyourself.brownpapertickets.com XSS vulnerability

Vulnerable URL: http://helpyourself.brownpapertickets.com/browse.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

crapemyrtletour.brownpapertickets.com XSS vulnerability

Vulnerable URL: http://crapemyrtletour.brownpapertickets.com/browse.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Facebook Messenger End-to-End Encryption Not On By Default

Facebook today began a test program rolling out opt-in end-to-end encryption for its Messenger service called Secret Conversations. The end-to-end encryption is based on the Signal protocol developed by Open Whisper Systems, the same protocol that stands up the crypto in the Signal and WhatsApp...

viking-direct.co.uk XSS vulnerability

Vulnerable URL: http://www.viking-direct.co.uk/a/bb/Printer-Paper/N=2+1289038/?cmsp=...

Paper Airplanes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Paper Airplanes published at the 'play' market has multiple vulnerabilities...

Paper Toss - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Paper Toss published at the 'play' market has multiple vulnerabilities...

Bamboo Paper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bamboo Paper published at the 'play' market has multiple vulnerabilities...

VDI nachrichten E-Paper - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application VDI nachrichten E-Paper published at the 'play' market has multiple vulnerabilities...

AZ/AN E-Paper - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AZ/AN E-Paper published at the 'play' market has multiple vulnerabilities...

RNZ E-Paper - BSD license, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application RNZ E-Paper published at the 'play' market has multiple vulnerabilities...

E-Paper der Rhein-Zeitung - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application E-Paper der Rhein-Zeitung published at the 'play' market has multiple vulnerabilities...

WESER-KURIER E-Paper - ContentProvider mode not defined, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application WESER-KURIER E-Paper published at the 'play' market has multiple vulnerabilities...