OracleVM 3.2 : openssl (OVMSA-2016-0071)

The remote OracleVM system is missing necessary patches to address critical security updates : - To disable SSLv2 client connections create the file /etc/sysconfig/openssl-ssl-client-kill-sslv2 John Haxby orabug 21673934 - Backport openssl 08-Jan-2015 security fixes John Haxby orabug 20409893 - f...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

WordPress < 4.5 Multiple Vulnerabilities

Binary data 9366.prm...

Спортмастер - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Спортмастер published at the 'play' market has multiple vulnerabilities...

AIX 7.2 : bos.rte.control (U870330)

The remote host is missing AIX PTF U870330, which is related to the security of the package bos.rte.control. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML dat...

Wordpress BulletProof Security 53.3 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple XSS Vulnerabilities in BulletProof Security Affected Software : BulletProof Security Affected Versions: v53.3 and possibly below Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type :...

FreeBSD : ImageMagick -- multiple vulnerabilities (0d724b05-687f-4527-9c03-af34d3b094ec) (ImageTragick)

Openwall reports : Insufficient filtering for filename passed to delegate's command allows remote code execution during conversion of several file formats. Any service which uses ImageMagick to process user-supplied images and uses default delegates.xml / policy.xml, may be vulnerable to this...

[SECURITY] Fedora 22 Update: openvas-libraries-8.0.7-2.fc22

openvas-libraries is the base library for the OpenVAS network security scanner...

Debian DSA-3566-1 : openssl - security update

Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit. - CVE-2016-2105 Guido Vranken discovered that an overflow can occur in the function EVPEncodeUpdate, used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption....

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.7-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

Htcap - web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes

htcap is a web application scanner able to crawl single page application SPA in a recursive manner by intercepting ajax calls and DOM changes. Htcap is not just another vulnerability scanner since it's focused mainly on the crawling process and uses external tools to discover vulnerabilities. It'...

MIT Launches Experimental Bug Bounty Program

The effectiveness of bug bounty programs is difficult to deny, especially after adoption of one at Uber, which announced last month it would begin paying $10,000 for critical bugs, and the Department of Defense, whose Hack the Pentagon illustrates the government’s softening stance on hackers. The...

Tumblr Mobile Application Detection

Binary data 9249.prm...

Oracle MySQL 5.5.x < 5.5.45 / 5.6.x < 5.6.26 Multiple Vulnerabilities

Binary data 9235.prm...

Drupal 7.x < 7.43 Multiple Vulnerabilities

Binary data 9220.prm...

Google Chrome < 49.0.2623.108 Multiple Vulnerabilities

Binary data 9204.pasl...

Dr. Parking 4 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Parking 4 published at the 'play' market has multiple vulnerabilities...

Read & Play Kids Stories Songs - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Read & Play Kids Stories Songs published at the 'play' market has multiple vulnerabilities...

BLOW mini games for Baby Kids - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BLOW mini games for Baby Kids published at the 'play' market has multiple vulnerabilities...

Boat Puzzles for Toddlers Kids - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Boat Puzzles for Toddlers Kids published at the 'play' market has multiple vulnerabilities...