CVE-2014-9194

The CVE-2014-9194 issue affects Arbiter Systems’ 1094B GPS Substation Clock. The vulnerability is described as Insufficient Verification of Data Authenticity (CWE-345) allowing remote attackers to spoof GPS satellite broadcasts via crafted radio transmissions, leading to clock disruption or servi...

[SECURITY] Fedora 21 Update: icecast-2.4.1-1.fc21

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 20 Update: icecast-2.4.1-1.fc20

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 19 Update: icecast-2.4.1-1.fc19

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

Joomla Component com_joomlaradio Remote File Inclusion (CVE-2007-4923)

A file inclusion vulnerability has been reported in Joomla Radio. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

AirHopper Steals Data From Air-Gapped Computers

Air-gapped computers are generally the home of sacrosanct data. The lack of a connection between these machines and others on a network, or the Internet, means in theory that data stored on those devices is kept away from the harm of web-based threats and hackers moving laterally on a network...

AirHopper — Hacking Into an Isolated Computer Using FM Radio Signals

In order to secure sensitive information such as Finance, many companies and government agencies generally use totally secure computer systems by making sure it aren't connected to any network at all. But the most secure systems aren't safe anymore. Security researchers at the Cyber Security Labs...

CVE-2014-7796

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4895

The Herpin Time Radio aka com.herpin.time.radio application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7759

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Open redirect

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Authentication flaw

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7731

The Radio de la Cato aka com.radio.de.la.cato application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4887

The CVE-2014-4887 entry applies to the Android app Joint Radio Blues (com.nobexinc.wls_69685189.rc) version 3.2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and retrieve sensitive information via ...

CVE-2014-4887

The Joint Radio Blues aka com.nobexinc.wls69685189.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4895

The Herpin Time Radio aka com.herpin.time.radio application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7731

The CVE-2014-7731 entry concerns the Radio de la Cato (aka com.radio.de.la.cato) Android app version 2.0 failing to verify SSL/X.509 certificates. The root cause is improper certificate verification in TLS/SSL handling, allowing MITM attackers to spoof servers and obtain sensitive data via a craf...

CVE-2014-7796

The CVE-2014-7796 entry concerns House365 Radio (Android, com.nobexinc.wls_27853803.rc) v3.2.3 where the app does not verify X.509 certificates from SSL servers. This implementation flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

CVE-2014-7796

The House365 Radio aka com.nobexinc.wls27853803.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...