Tractor Pull - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tractor Pull published at the 'play' market has multiple vulnerabilities...

PULL&BEAR - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application PULL&BEAR published at the 'play' market has multiple vulnerabilities...

Pull Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pull Ups Workout published at the 'play' market has multiple vulnerabilities...

Runtastic Pull-ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Pull-ups Workout published at the 'play' market has multiple vulnerabilities...

Internet Bug Bounty: Integer overflow in wordwrap

https://github.com/php/php-src/pull/1738issuecomment-174260748...

Authentication Bypass

Overview Versions of hapi-auth-jwt2 prior to version 5.1.2 are affected by a complete authentication bypass vulnerability when in the try authentication mode. Recommendation Update to version 5.1.2 or later. References - Issue 111 - PR 112 - GitHub Advisory...

HP Access Control Access Disclosure

The vulnerability of the Secure Pull Print and Security Pull Print components of the HP Access Control printing management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

PT-2019-7142

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.8.3 CS Docker Engine versions prior to 1.6.2-CS7 Description The issue arises from improper validation and extraction of the manifest object from its JSON representation during a pull. This allows attackers to...

PT-2019-7141

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 1.8.3 CS Docker Engine versions prior to 1.6.2-CS7 Description The issue makes it easier for attackers to poison the image cache via a crafted image in pull or push commands, due to the lack of a globally unique...

Mike Mimoso and Chris Brook Discuss how the a Campaign Using the Angler Exploit Kit was Disrupted and More of the Week's News

Mike Mimoso and Chris Brook discuss the week in news–including how researchers disrupted a $30M campaign using the Angler Exploit Kit, how another researcher was forced to pull a talk from a conference, and how a practical SHA-1 collision could be months away, not years. Download:...

Pygments FontManager._get_nix_font_path Shell Injection Vulnerability

Pygments FontManager.getnixfontpath version 1.2.2-2.0.2 suffers from a shell injection vulnerability. Shell Injection in Pygments FontManager.getnixfontpath Product: Pygments Version: 1.2.2-2.0.2 497:fe62167596bb to 3693:655dbebddc23 Tue Nov 06 17:30:45 2007 +0000 to Aug 21, 2015. Website:...

[security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04649315 Version: 1 HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

CVE-2015-2118

Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control AC Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2015-2118

CVE-2015-2118 affects HP Access Control (AC) Pull Print components (Secure Pull Print / Security Pull Print) for HP AC 12.x–14.x up to 14.1.2. The HP Security Bulletin (HPSBPI03322 rev.1/ rev.2) describes a local unauthorized access vulnerability that could allow an attacker with local access to ...

PT-2015-2783

Name of the Vulnerable Software and Affected Versions HP Access Control AC Software versions 12.x through 14.x before 14.1.2 Description The issue is related to unspecified vulnerabilities in the Secure Pull Print and Security Pull Print components. These vulnerabilities can be exploited by remot...

CVE-2015-2118: Undefined Security Weakness

Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control AC Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors...

HP Access Control Pull Print Unauthorized Access Vulnerability

HP Access Control allows users to authenticate with an NFC-enabled smartphone or tablet. HP Access Control has a security vulnerability that could be exploited by a local attacker to perform unauthorized access...

Red Hat Linux Data Compromise

The vulnerability of the slrn-pull-0.9.6.4 package for the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

USN-2470-1 git vulnerability

Matt Mackall and Augie Fackler discovered that Git incorrectly handled certain filesystem paths. A remote attacker could possibly use this issue to execute arbitrary code if the Git tree is stored in an HFS+ or NTFS filesystem. The remote attacker would need write access to a Git repository that...

DEBIAN-CVE-2014-6407

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a 1 symlink or 2 hard link attack in an image archive in a a pull or b load operation...