Amazone Reality - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Amazone Reality published at the 'play' market has multiple vulnerabilities...

SEAT Augmented Reality - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SEAT Augmented Reality published at the 'play' market has multiple vulnerabilities...

Vrse - Virtual Reality - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Vrse - Virtual Reality published at the 'play' market has multiple vulnerabilities...

Augment - 3D Augmented Reality - BSD license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Augment - 3D Augmented Reality published at the 'play' market has multiple vulnerabilities...

Tilt - Augmented Reality - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tilt - Augmented Reality published at the 'play' market has multiple vulnerabilities...

Fulldive VR - Virtual Reality - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fulldive VR - Virtual Reality published at the 'play' market has multiple vulnerabilities...

These Laser Beams Will Offer Free Internet to the World from the Sky

During a wide-ranging online question-and-answer session on his Facebook page Tuesday, Facebook co-founder Mark Zuckerberg predicted some wild things for Future. It includes: Telepathy Technology, the ability for humans to talk to each other with their minds. Laser Beams, used to transmit data fr...

Lame Duck Senate to Vote on NSA Reforming USA FREEDOM Act

The United States Senate will move to vote on the USA FREEDOM Act before the current congressional session closes at the end of the year, a move that pleases digital rights groups. In its current form, the bill would ban the bulk collection of Americans’ private records while granting the...

Truth is SCARIER than Fiction Redux

Yes... To be honest, although we really do some neat stuff here at Coalfire Labs that can be pretty scary, Ive got to give a shout out to "reality" for being even scarier than any emulated attack we could possibly develop. The astounding number of data breaches announced this year is just shockin...

Synthetic Reality SymPoll 1.5 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8956/info It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' parameter. The problem may...

Digital Reality Game Engine 1.0.x Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a...

Java enabled browsers are highly vulnerable

Oracle has released emergency patches multiple of times in recent months for Java for one after another set of vulnerabilities. About 100 million computers reported to be vulnerable to unauthorized access via different flaw in Java software. Department of Homeland Security's US-CERT already warne...

Resilient Security Requires Creativity and Intelligence

Try to dampen your innate cynicism for one second, forget the source of this next comment, and absorb it: “We need resilient defenses.” Dr. Steve King uttered those words at a small security event in Boston last week. Four simple words you’ve heard before that today make so much sense. King is th...

Free Reality 3.1-0.6 XSS / CSRF / SQL Injection

Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Date: ===== 2012-05-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 513 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Free...

Free Reality v3.1-0.6 - Multiple Web Vulnerabilities

Document Title: =============== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 513...

Video: Privacy in the Age of Augmented Reality

Threatpost has spoken before with Carnegie Mellon University professor Alessandro Acquisti, one of the country’s leading authorities on the impact of social networks and emerging technologies on privacy. In a talk last week at Stanford University’s Center for Internet and Society titled “Privacy ...

Integer overflow

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted panorama atom in a QuickTime Virtual Reality QTVR movie file...

The hype factor at the RSA conference

From CNet Jon Oltsik It’s nearly time for that annual spring ritual: the RSA Conference at the Moscone Center in San Francisco. ESG data tells me that, despite the recession, global organizations continue to spend on security products. So I expect another good show, though I do anticipate that th...

CVE-2008-3624

Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a QuickTime Virtual Reality QTVR movie file with crafted panorama atoms...

CVE-2004-2361

Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service crash via a chat message with a large message size, which triggers an out-of-bounds read...