UBUNTU-CVE-2016-1858

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site...

About the security content of Safari 9.1.1

About the security content of Safari 9.1.1 This document describes the security content of Safari 9.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. T...

Google Fit - Fitness Tracking - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Google Fit - Fitness Tracking published at the 'play' market has multiple vulnerabilities...

U.S. developing Technology to Identify and Track Hackers Worldwide

Without adequate analysis and algorithms, mass surveillance is not the answer to fighting terrorism and tracking suspects. That's what President Obama had learned last year when he signed the USA Freedom Act, which ends the bulk collection of domestic phone data by US Intelligence Agencies. There...

LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage

Issue The reporter was able to perform a Blind Pervasive XSS against some of the public forms on LocalTapiolas website. The persistent or stored XSS vulnerability is a more devastating variant of a cross-site scripting flaw: it occurs when the data provided by the attacker is saved by the server,...

Design/Logic Flaw

The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an...

CVE-2016-2550

The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service memory consumption by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an...

Threat Outbreak Alert RuleID22523: Email Messages Distributing Malicious Software on April 27, 2016

Medium Alert ID: 44871 First Published: 2016 April 27 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22523 and RuleID22523KVR may contain the followi...

Invoice & Time Tracking - Zoho - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Time Tracking - Zoho published at the 'play' market has multiple vulnerabilities...

Adobe Analytics AppMeasurement for Flash Library Cross-Site Scripting Vulnerability

Adobe Analytics AppMeasurement for Flash Library is a component based on the Flash Library and used to compile Flash or Flex applications. A cross-site scripting vulnerability in Adobe Analytics AppMeasurement for Flash Library, when debugTracking is enabled in the program, could be exploited by...

CVE-2016-1036

Cross-site scripting XSS vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[SECURITY] Fedora 22 Update: glpi-0.90.3-1.fc22

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

BlackBerry CEO Defends Lawful Access Principles, Supports Phone Hack

BlackBerry’s CEO made the company’s stance on lawful access requests clear this week and is defending actions to provide Canadian law enforcement with what it needed to decrypt communications between devices. The company’s CEO John Chen penned a statement on Monday, reiterating that one of...

Hackers can spy on your calls and track location, using just your phone number

In Brief The famous ‘60 Minutes’ television show shocked some viewers Sunday evening when a team of German hackers demonstrated how they spied on an iPhone used by U.S. Congressman, then recorded his phone calls and tracked his movement through Los Angeles. Hackers leverage a security flaw in SS7...

BadLock vulnerability of technology to track and risk protection-vulnerability warning-the black bar safety net

Nsfocus continued focus on domestic security trends, as early as 3 months when first released BadLock threat warning notices. 4 on 1 on 2, Microsoft patch day schedule. At this time Microsoft released the patch, contains a BadLock vulnerability that can be on a windows System and the Samba servic...

The vulnerability of the Safari browser, which allows a hacker to track users

The vulnerability of the Top Sites function in the Safari browser is related to improper storage of cookie files. Exploiting this vulnerability can allow a malicious actor to remotely track users...

The vulnerability of Safari browser and iOS operating system allows attackers to track users.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to remotely track users...

MoneyControl Expense Tracking - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MoneyControl Expense Tracking published at the 'play' market has multiple vulnerabilities...

Airline Flight Status Tracking - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Airline Flight Status Tracking published at the 'play' market has multiple vulnerabilities...

SNOCRU Ski Tracking App - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SNOCRU Ski Tracking App published at the 'play' market has multiple vulnerabilities...