JVN#71104430: Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege...

JVN#23546631: Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the use...

Microsoft Edge CVE-2017-8661 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Microsoft Edge and Internet Explorer CVE-2017-8669 Remote Memory Corruption Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Microsoft Edge CVE-2017-8655 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Microsoft Internet Explorer and Edge CVE-2017-8635 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Tasarruf Ölçer - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Tasarruf Ölçer published at the 'play' market has multiple vulnerabilities...

Wireless Remote Vibrator - Certificates or keys found, Exported components, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Wireless Remote Vibrator published at the 'play' market has multiple vulnerabilities...

GlassWire – Data Usage Privacy - Exported ContentProvider, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application GlassWire – Data Usage Privacy published at the 'play' market has multiple vulnerabilities...

Suspicious Site Containing Tech Scams

Many scams have emerged looking to steal money or information by giving users false information claiming that their computers are infected. After such claims they give the users a phone number to call or a way to pay to solve their issues. A successful attack can lead to stolen credentials or mon...

Telit IoT TI Tag Viewer - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Telit IoT TI Tag Viewer published at the 'play' market has multiple vulnerabilities...

Microsoft Windows PowerShell CVE-2017-8565 Remote Code Execution Vulnerability

Description Microsoft Windows PowerShell is prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions...

Microsoft Edge and Internet Explorer CVE-2017-8608 Remote Memory Corruption Vulnerability

Description Microsoft Edge and Internet Explorer are prone to remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft...

Microsoft Internet Explorer CVE-2017-8618 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of...

Microsoft Edge CVE-2017-8605 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Edge Recommendations...

Commentary on US Election Security

Good commentaries from Ed Felten and Matt Blaze. Both make a point that I have also been saying: hacks can undermine the legitimacy of an election, even if there is no actual voter or vote manipulation. Felten: The second lesson is that we should be paying more attention to attacks that aim to...

Google TalkBack - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Google TalkBack published at the 'play' market has multiple vulnerabilities...

Suspicious URL Containing Multiple Top Level Domains

Many scam websites attempt to look like regular websites in order to steal information. One technique is to have multiple top level domains in the URL in order to confuse the user. A successful attack can lead to stolen information...

DisplayLink Presenter - Native code usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application DisplayLink Presenter published at the 'play' market has multiple vulnerabilities...

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Description Microsoft Skype for Business and Lync Server are prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service...