CVE-2015-5738

The CVE-2015-5738 issue concerns the Cavium SDK 2.x RSA-CRT implementation used on OCTEON II CN6xxx hardware under Linux to support TLS with PFS. A Lenstra fault-side channel attack could allow remote attackers to obtain private RSA keys. Connected advisories indicate mitigations exist in vendor/...

Logo Quiz Perfect! - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Logo Quiz Perfect! published at the 'play' market has multiple vulnerabilities...

MLB Perfect Inning 15 - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MLB Perfect Inning 15 published at the 'play' market has multiple vulnerabilities...

Perfect Kick - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Kick published at the 'play' market has multiple vulnerabilities...

Real Perfect Guitar - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Perfect Guitar published at the 'play' market has multiple vulnerabilities...

Perfect Braid Hairdresser - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Braid Hairdresser published at the 'play' market has multiple vulnerabilities...

Marry Me - Perfect Wedding Day - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Marry Me - Perfect Wedding Day published at the 'play' market has multiple vulnerabilities...

Solitaire Perfect Match - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire Perfect Match published at the 'play' market has multiple vulnerabilities...

Video Player Perfect (HD) - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Video Player Perfect HD published at the 'play' market has multiple vulnerabilities...

Perfect LOL Guide - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Perfect LOL Guide published at the 'play' market has multiple vulnerabilities...

YouCam Perfect - Selfie Cam - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application YouCam Perfect - Selfie Cam published at the 'play' market has multiple vulnerabilities...

Perfect Vocal Free - Dynamic Code Loading, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Vocal Free published at the 'play' market has multiple vulnerabilities...

Video Player Perfect - Corrupted files, Exported components, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Video Player Perfect published at the 'play' market has multiple vulnerabilities...

Perfect Viewer Source Plugin - Customized SSL, Insecure KeyStore, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Viewer Source Plugin published at the 'play' market has multiple vulnerabilities...

Perfect Viewer - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Viewer published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: libotr-4.1.1-1.fc24

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Debian Security Advisory DSA 3528-1 (pidgin-otr - security update)

Stefan Sperling discovered that pidgin-otr, a Pidgin plugin implementing Off-The-Record messaging, contained a use-after-free bug. This could be used by a malicious remote user to intentionally crash the application, thus causing a denial-of-service. OpenVAS Vulnerability Test $Id: deb3528.nasl...

[SECURITY] Fedora 23 Update: libotr-4.1.1-1.fc23

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

[SECURITY] Fedora 22 Update: libotr-4.1.1-1.fc22

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Microsoft Brings HSTS to Windows 7 and 8.1

In the midst of a relatively light Patch Tuesday, Microsoft yesterday introduced an extra measure of security for users running Internet Explorer 11 on Windows 7 and Windows 8.1 machines: HSTS. Short for HTTP Strict Transport Security, HSTS is a browser header that forces any sessions sent over...