WatchMaster - Watch Face - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WatchMaster - Watch Face published at the 'play' market has multiple vulnerabilities...

リズムプラス 幼児子供向けの音楽遊び チャギントン無料ゲーム - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application リズムプラス 幼児子供向けの音楽遊び チャギントン無料ゲーム published at the 'play' market has multiple vulnerabilities...

Nouveau Riche Gold Theme - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Nouveau Riche Gold Theme published at the 'play' market has multiple vulnerabilities...

Volvo Ocean Race 2014-15 - Customized SSL, GPL license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Volvo Ocean Race 2014-15 published at the 'play' market has multiple vulnerabilities...

Morgan Stanley Research - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Morgan Stanley Research published at the 'play' market has multiple vulnerabilities...

zap.co.il XSS vulnerability

Vulnerable URL: http://www.zap.co.il/cat.aspx?cat=sport'-alert%28/xssposed/%29-' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10256 Google Pagerank| 5 VIP website status:| Yes Check zap.co.il SSL connection:|...

CVE-2015-4456

ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a...

Camera360 is proof the presence of vulnerability: the presence of data leakage risk resulting from unauthorized access to others ' photos-bug warning-the black bar safety net

Many of the popular Apps are there privacy data leakage problem, we in the Google App Store, found a product called Camera360 photography App. The App although the user can make the photo become very beautiful, but in the unintentional leakage between the user's privacy data: a malicious attacker...

SuSE 11.3 Security Update : Mono (SAT Patch Number 10497)

Multiple SSL vulnerabilities were fixed in the Mono TLS implementation. - SKIP-TLS problem could be used to client impersonification. CVE-2015-2318 - A FREAK style SSL protocol downgrade problem was fixed. CVE-2015-2319 - The SSLv2 support was disabled. CVE-2015-2320 %NASLMINLEVEL 70300 C Tenable...

PCI DSS version 3.1 released!

As expected, a "minor" revision to the PCI DSS 3.0 standard now version 3.1 was released by the PCI SSC today to address the vulnerabilities exposed by the POODLE and BEAST browser attacks. PCI DSS 3.1 primarily addresses the insecure use of SSL as an encryption protocol within a Cardholder Data...

Debian Security Advisory DSA 3125-1 (openssl - security update)

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-3569 Frank Schmirler reported that the ssl23getclienthello function in OpenSSL does not properly handle attempts to...

Google Releases 'nogotofail' Network Traffic Security Testing Tool

Google introduced a new security tool to help developers detect bugs and security glitches in the network traffic security that may leave passwords and other sensitive information open to snooping. The open source tool, dubbed as Nogotofail, has been launched by the technology giant in sake of a...

Pivotal Web Server 5.x < 5.4.1 Multiple OpenSSL Vulnerabilities

The version of Pivotal Web Server formerly VMware vFabric Web Server installed on the remote host is version 5.x prior to 5.4.1. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL : - An error exists in the 'ssl3readbytes' function that permits data to be...

Puppet Enterprise 2.8.x / 3.2.x Multiple Vulnerabilities

According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 2.8.x or 3.2.x. It is, therefore, affected by multiple vulnerabilities : - An error exists in the 'dossl3write' function that permits a NULL pointer to be dereferenced, which...

HP Version Control Agent (VCA) < 7.3.3 Multiple SSL Vulnerabilities

The RPM installation of HP Version Control Agent VCA on the remote Linux host is a version prior to 7.3.3. It is, therefore, affected by multiple vulnerabilities in the bundled version of SSL : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions ...

VMware Horizon View Client < 3.0.0 Multiple SSL Vulnerabilities (VMSA-2014-0006) (Mac OS X)

The version of VMware Horizon View Client installed on the remote Mac OS X host is a version prior to 3.0.0. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other...

VMware Horizon View Client < 3.0.0 Multiple SSL Vulnerabilities (VMSA-2014-0006)

The version of VMware Horizon View Client installed on the remote host is a version prior to 3.0.0. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or...

Researcher to Demonstrate Poor SSL Implementations Using Pineapple WiFi

A leading provider of advanced threat, security and compliance solutions, Tripwire, has announced that Craig Young, a security researcher from its Vulnerability and Exposure Research Team VERT, is working on a paper about SSL vulnerabilities that will be presented at DEF CON 22 Wireless Village...

openSUSE Security Update : nss-201112 (openSUSE-SU-2012:0030-1) (BEAST)

The Mozilla NSS libraries were updated to version 3.13.1 to fix various bugs and security problems. Following security issues were fixed: dbg114-nss-201112-5564 newupdateinfo nss-201112-5564 SSL 2.0 is disabled by default dbg114-nss-201112-5564 newupdateinfo nss-201112-5564 A defense against the...

Apple Releases OS X 10.9.3, Fixes Serious Flaw in iTunes

Apple has released a new version of OS X Mavericks, which includes all of the security fixes it pushed out last month. OS X 10.9.3 includes the patches for the so-called triple handshake SSL vulnerability, as well as fixes for several remote code-execution vulnerabilities. The company also releas...