CVE-2015-5738

The RSA-CRT implementation in the Cavium Software Development Kit SDK 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy PFS, makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack...

CVE-2015-5738

The CVE-2015-5738 issue concerns the Cavium SDK 2.x RSA-CRT implementation used on OCTEON II CN6xxx hardware under Linux to support TLS with PFS. A Lenstra fault-side channel attack could allow remote attackers to obtain private RSA keys. Connected advisories indicate mitigations exist in vendor/...

Logo Quiz Perfect! - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Logo Quiz Perfect! published at the 'play' market has multiple vulnerabilities...

MLB Perfect Inning 15 - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MLB Perfect Inning 15 published at the 'play' market has multiple vulnerabilities...

Perfect Kick - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Kick published at the 'play' market has multiple vulnerabilities...

Real Perfect Guitar - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Perfect Guitar published at the 'play' market has multiple vulnerabilities...

Perfect Braid Hairdresser - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Braid Hairdresser published at the 'play' market has multiple vulnerabilities...

Marry Me - Perfect Wedding Day - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Marry Me - Perfect Wedding Day published at the 'play' market has multiple vulnerabilities...

Solitaire Perfect Match - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire Perfect Match published at the 'play' market has multiple vulnerabilities...

Video Player Perfect (HD) - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Video Player Perfect HD published at the 'play' market has multiple vulnerabilities...

Perfect LOL Guide - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Perfect LOL Guide published at the 'play' market has multiple vulnerabilities...

YouCam Perfect - Selfie Cam - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application YouCam Perfect - Selfie Cam published at the 'play' market has multiple vulnerabilities...

Perfect Vocal Free - Dynamic Code Loading, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Vocal Free published at the 'play' market has multiple vulnerabilities...

Video Player Perfect - Corrupted files, Exported components, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Video Player Perfect published at the 'play' market has multiple vulnerabilities...

Perfect Viewer Source Plugin - Customized SSL, Insecure KeyStore, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Viewer Source Plugin published at the 'play' market has multiple vulnerabilities...

Perfect Viewer - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Perfect Viewer published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: libotr-4.1.1-1.fc24

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Debian Security Advisory DSA 3528-1 (pidgin-otr - security update)

Stefan Sperling discovered that pidgin-otr, a Pidgin plugin implementing Off-The-Record messaging, contained a use-after-free bug. This could be used by a malicious remote user to intentionally crash the application, thus causing a denial-of-service. OpenVAS Vulnerability Test $Id: deb3528.nasl...

[SECURITY] Fedora 23 Update: libotr-4.1.1-1.fc23

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

[SECURITY] Fedora 22 Update: libotr-4.1.1-1.fc22

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...