5628 matches found
uTorrent Forums User List Stolen
BitTorrent has warned users of its uTorrent client to change their passwords after a third-party breach allowed hackers to walk off with a list of its forum users. “On June 6th, 2016, BitTorrent was made aware of a security issue involving the vendor which powers our forums,” the company said in ...
drchrono: User with no permissions can access full wdcalendar feed
Hi All, I've found a vulnerability related to access the calendar when a user has no permissions. Vulnerability I've create a doctor's account with a user who has no permission. Browsing the site, I noticed a call to...
Cisco WebEx Meeting Center Improved Logging Capabilities
Cisco WebEx Meeting Center user accounts are subject to enumeration via Personal Meeting Rooms PMRs. This advisory documents that an administrative update has been made to improve the logging of connections to the PMRs. This advisory is available at the following link:...
Google Trust API plans to replace your Passwords with Trust Score
The importance of increasing online security around personal information has risen due to the increase in cyber attacks and data breaches over recent years. I find it hilarious people are still choosing terrible passwords to protect their online accounts. The massive LinkedIn hack is the latest i...
Reflective XSS Vulnerability in EasyCMS Enterprise Marketing Management System Administration Backend
EasyCMS is a web content management system based on PHP+Mysql architecture. A reflective XSS vulnerability exists in the administration backend of the EasyCMS enterprise marketing management system, which can be exploited by an attacker to submit data with js code on the personal information page...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability in the btif/src/btifdm.c function of the Android operating system’s Bluetooth component is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code with the help of a long PIN value...
This App Lets You Find Anyone's Social Profile Just By Taking Their Photo
Is Google or Facebook evil? Forget it! Russian nerds have developed a new Face Recognition technology based app called FindFace, which is a nightmare for privacy lovers and human right advocates. FindFace is a terrifyingly powerful facial recognition app that lets you photograph strangers in a...
Multiple I-O DATA DEVICE Product PIN Recovery Vulnerabilities
I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-S, WN-GDN/R3-U, and WN-GDN/R3-C are wireless LAN router products from I-O DATA DEVICE Japan. A security vulnerability exists in several I-O DATA DEVICE products, which allows remote attackers to gain access to the network by performing a brute-force attack to...
Malware-Laced Porn Apps Behind Wave of Android Lockscreen Attacks
Incidents of Android lockscreen malware masquerading as porn apps are a growing concern to security analysts who are forecasting an uptick in attacks. Once infected, Android users bitten by this malware appear to be locked out of their device and are forced to undergo a complex extraction of the...
WN-GDN/R3 Series does not limit authentication attempts
Overview WN-GDN/R3 Series provided by I-O DATA DEVICE, INC. does not limit authentication attempts. WN-GDN/R3 series provided by I-O DATA DEVICE, INC. is a wireless LAN router. WPS functionality in WN-GDN/R3 Series does not limit PIN authentication attempts, making it susceptible to brute force...
Android Qualcomm Tethering Controller Information Disclosure Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Android's Qualcomm Tethering Controller, which can be exploited by a local attacker with the help of a malicious application to...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2016-02763)
Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. An information disclosure vulnerability exists in versions of Mozilla Firefox prior to 46.0 based on the Android platform. A remote attacker can exploit the vulnerability t...
[SECURITY] Fedora 24 Update: keepassx-0.4.4-1.fc24
KeePassX is an application for people with extremly high demands on secure personal data management. KeePassX saves many different information e.g. user names, passwords, urls, attachemts and comments in one single database. For a better management user-defined titles and icons can be specified f...
IRS Warns Taxpayers About Scams as Tax Deadline Approaches
The Internal Revenue Service IRS has issued a press release to warn of a potential increase in scams targeting taxpayers around the April 18 tax deadline. Before and after the deadline, scammers may tempt or pressure taxpayers into revealing personal information. US-CERT and IRS recommend taxpaye...
«МегаФон» Личный кабинет - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application «МегаФон» Личный кабинет published at the 'play' market has multiple vulnerabilities...
Information on 50 Million Turkish Citizens Dumped Online
Turkey’s communications minister this week is denying reports that personally identifiable information of 50 million of the country’s citizens has been leaked online. On Monday hackers published what they claim is a Turkish citizenship database, a cache of information downloadable via BitTorrent,...
Personal Data of 50 Million Turkish Citizens Leaked Online
Personal details of nearly 50 Million Turkish citizens, including the country's President Recep Tayyip Erdogan, have been compromised and posted online in a massive security breach. A database, which contains 49,611,709 records, appeared on the website of an Icelandic group on Monday, offering...
Personal Voice Judge - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Personal Voice Judge published at the 'play' market has multiple vulnerabilities...
PERSONAL DIARY with password - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application PERSONAL DIARY with password published at the 'play' market has multiple vulnerabilities...