Encryption 101: decryption tool code walkthrough

We have reached the final installment of our Encryption 101 series. In the prior post, we walked through, in detail, the thought process while looking at the Princess Locker ransomware. We talked about the specific ways to narrow down the analysis toward the encryption portions, the weaknesses in...

CVE-2014-7064

The ben10 omniverse walkthrough aka com.wben10omniverse2walkthrough application 0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7064

The CVE-2014-7064 entry concerns the Android app ben10 omniverse walkthrough (com.wben10omniverse2walkthrough) version 0.7, where TLS/SSL certificate validation is not performed. This missing certificate verification enables man-in-the-middle attackers to spoof SSL servers and obtain sensitive in...

[iBliss Security Advisory] Cross-Site Scripting (XSS) vulnerability in Design-approval-system wordpress plugin

Design-Approval-System Wordpress plugin XSS vendor product description A system to streamline the process of getting designs, photos, documents, videos or music approved by clients quickly. Bug Description The walkthrouth web page does not validate the step parameter leading to a Cross-site...

WordPress Design Approval System Plugin <= 3.6 - XSS

Because of this vulnerability in admin/walkthrough/walkthrough.php, the attackers can inject arbitrary web script or HTML via the "step" parameter. Solution Update the plugin...