World of Tanks Blitz - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application World of Tanks Blitz published at the 'play' market has multiple vulnerabilities...

Pocket Tanks - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pocket Tanks published at the 'play' market has multiple vulnerabilities...

War of Tanks - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application War of Tanks published at the 'play' market has multiple vulnerabilities...

Iron Tanks - Online Battle - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Iron Tanks - Online Battle published at the 'play' market has multiple vulnerabilities...

Battle Alert : War of Tanks - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Battle Alert : War of Tanks published at the 'play' market has multiple vulnerabilities...

tanks-direct.co.uk XSS vulnerability

Vulnerable URL: http://www.tanks-direct.co.uk/search.php?cid=0id=0=derp "&Submit.x;=0&Submit.y;=0 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 671236...

CVE-2014-5806

The World of Tanks Assistant aka ru.worldoftanks.mobile application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5806

CVE-2014-5806 affects the Android application World of Tanks Assistant (ru.worldoftanks.mobile), version 1.7.5. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5806

The World of Tanks Assistant aka ru.worldoftanks.mobile application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Deep Panda China Hackers Compromise Security Think Tanks

Computers at a number of unnamed national security think tanks were compromised by hackers linked to China trying to glean intelligence on U.S. policy in Iraq as civil unrest escalates in the Middle East country. The attacks mark a shift in tactics by this particular group, which generally keeps...

Kaspersky revealed "Kimsuky" Cyber Espionage campaign targeting South Korea

Russian Security Firm Kaspersky Lab has revealed that it has been following a sustained attack on South Korea by hackers seemingly based in North Korea., This new Cyber Espionage campaign dubbed "Kimsuky" has targeted several South Korean think tanks. Researchers believe the Kimsuky malware is mo...

APT1-Themed Spear Phishing Campaign Linked to China

Researchers at Seculert have discovered a link between spear phishing campaigns targeting Japanese and Chinese journalists, post-Mandiant’s APT1 report, and domains connected to the Aurora attacks on Google and the Shady RAT campaign. In particular, in the attacks against the Japanese, the malwar...

HDWiki 5.1 arbitrary User Password Change vulnerability and fix-vulnerability warning-the black bar safety net

HDWiki reset the password there is a logical vulnerability, the attacker can modify any user password. Detailed description: control/user.php function dogetpass ...... elseifisset$this-post'verifystring' $uid=$this-post'uid'; $encryptstring=$this-post'verifystring';...