CVE-2017-6977

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

CVE-2017-6977

CVE-2017-6977 is a memory corruption/sandbox escape vulnerability in the Speech Framework affecting macOS Sierra (variant before 10.12.5). The issue is exposed via crafted apps and is addressed by Apple in macOS Sierra 10.12.5 (Security Update 2017-002 El Capitan/Yosemite included). The Apple adv...

CVE-2017-2534

CVE-2017-2534 affects macOS Sierra (Speech Framework). A crafted app could cause a sandbox-escape via the Speech Framework vulnerability. Affected: macOS before 10.12.5. Impact: sandbox escape (local, requires user interaction). Remediation: Apple Security Update 2017-002 for macOS 10.12.5 (and r...

Google reCaptcha Bypass Technique Uses Google's Own Tools

A proof of concept bypass of Google’s reCaptcha V2 verification system, posted online Tuesday, uses Google’s own web-based tools to pull off the skirting of the system. The tool dubbed ReBreakCaptcha “lets you easily bypass Google’s reCaptcha v2 anywhere on the web,” according to the author of th...

EFF Files Lawsuit Challenging DMCA's Restrictions Security Researchers

The Electronic Frontier Foundation filed a lawsuit Thursday against the U.S. Government over a provision within the Digital Millennium Copyright Act that it says impinges on free speech and hobbles security researchers ability to do their job. The lawsuit asks the court to strike down the highly...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation, known as the “use-after-free error” in the Freebsoft Laboratory Speech Dispatcher module. Exploiting this vulnerability allows malicious actors to cause service interruptions application freezes or othe...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to memory reuse after deallocation use-after-free error in the browser/ui/views/speechrecognitionbubbleviews.cc file. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other adverse effects through...

Microsoft Wins Widespread Support in Privacy Clash With Govt.

Microsoft’s lawsuit against the U.S. government for the right to tell its customers when a federal agency is looking at their emails is getting widespread support by privacy advocates. For many, Microsoft’s stance lends an important and powerful voice to ongoing efforts to reform the Electronic...

Train speech for kids 4-7 Free - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Train speech for kids 4-7 Free published at the 'play' market has multiple vulnerabilities...

Google Text-to-speech - Customized SSL, Hardcoded secrets, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Google Text-to-speech published at the 'play' market has multiple vulnerabilities...

Speech To Text & Text To Voice - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Speech To Text & Text To Voice published at the 'play' market has multiple vulnerabilities...

Classic Text To Speech Engine - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Classic Text To Speech Engine published at the 'play' market has multiple vulnerabilities...

IVONA Text-to-Speech HQ - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application IVONA Text-to-Speech HQ published at the 'play' market has multiple vulnerabilities...

SPEECH TO TEXT TRANSLATOR TTS - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application SPEECH TO TEXT TRANSLATOR TTS published at the 'play' market has multiple vulnerabilities...

Facebook Offering You $1000 to Run Advertisement Against Terrorism

Over a past few times, we have seen a steady growth in the online recruitment of Jihadis from social networking sites by many radical groups. ISIS has topped the online recruitment, and it is the only terror group that leverages the enormous power of Twitter and Facebook to radicalize young minds...

Kazakhstan makes it Mandatory for its Citizens to Install Internet Backdoor

Next in the queue, Kazakhstan is also planning to Spy on encrypted Internet Traffic of its citizens, but in the most shameless way. Unlike other spying nations that are themselves capable of spying on their citizens, Kazakhstan will force every internet user in the country to install bogus securi...

The vulnerability of the Mac OS X operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Speech UI component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted Unicode string...

Apple OS X Speech UI Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in the Apple OS X Speech UI, which allows remote attackers to exploit the vulnerability by submitting a special Unicode string and tricking an application into parsing it, which can execute...

CVE-2015-3794

The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Unicode string...