A primer: How to stay safe on Amazon Prime Day

Bank card—check! Shopping list—check! Lumbar back support pillow—check! Noise canceling headphones—check! And, of course, coffee—check! If you’re an Amazon shopper, then you know by now that Prime Day is nigh! And if you’re one of the many who dreads bidding the weekend goodbye, this is probably...

Slack: Invitation reminder emails contain insecure links

If one gets invited to a slack channel and does not act upon the invitation a while later a reminder email is sent. The links in these reminders are http links. Excerpt from the mail: ---------------------- Don’t miss out — come join the conversation! Join Now...

UBUNTU-CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...

Hobi - TV Shows Reminder - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Hobi - TV Shows Reminder published at the 'play' market has multiple vulnerabilities...

Open-Xchange: IDOR - Deleting other user's reminders just by id

Hello, I have found that one can delete other user's reminders just by passing the id. The folder id, user id and other linking data is not passed and not validated by making a normal delete requests all these parameters are passed, but they don't seem to be validated POC ---------------- PUT...

Uber: Attacker could setup reminder remotely using brute force

Hi, Attacker could setup the reminder for bulk no of amount of accounts using there phone no's. He could setup infinite no of reminders. Tried brute force for 100 times worked perfectly here is the link : https://widgets.uber.com/american-airlines-reminders/ Here any phone-no is accepted. Actuall...

Water Drink Reminder - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Water Drink Reminder published at the 'play' market has multiple vulnerabilities...

Wi-Fi password reminder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wi-Fi password reminder published at the 'play' market has multiple vulnerabilities...

Lady Pill Reminder - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lady Pill Reminder published at the 'play' market has multiple vulnerabilities...

Just Reminder - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Just Reminder published at the 'play' market has multiple vulnerabilities...

To Do Reminder - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application To Do Reminder published at the 'play' market has multiple vulnerabilities...

Dosecast - Medication Reminder - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Dosecast - Medication Reminder published at the 'play' market has multiple vulnerabilities...

Med Helper Pill Reminder - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Med Helper Pill Reminder published at the 'play' market has multiple vulnerabilities...

Pill Reminder - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Pill Reminder published at the 'play' market has multiple vulnerabilities...

Lady Pill Reminder Anytimer - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Lady Pill Reminder Anytimer published at the 'play' market has multiple vulnerabilities...

Medications Reminder - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Medications Reminder published at the 'play' market has multiple vulnerabilities...

Pill Reminder - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Pill Reminder published at the 'play' market has multiple vulnerabilities...