New Year 2016 Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year 2016 Live Wallpaper published at the 'play' market has multiple vulnerabilities...

New Year Weather Widget Theme - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Weather Widget Theme published at the 'play' market has multiple vulnerabilities...

New Year Clock - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year Clock published at the 'play' market has multiple vulnerabilities...

New Year FireWorks - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application New Year FireWorks published at the 'play' market has multiple vulnerabilities...

New Year Ringtones Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Ringtones Free published at the 'play' market has multiple vulnerabilities...

New Year Live Wallpaper - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year Live Wallpaper published at the 'play' market has multiple vulnerabilities...

New Year Wallpaper 2016 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Wallpaper 2016 published at the 'play' market has multiple vulnerabilities...

Happy New Year 2016! - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Happy New Year 2016! published at the 'play' market has multiple vulnerabilities...

New Year Greeting Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Greeting Cards published at the 'play' market has multiple vulnerabilities...

Happy New Year 2016 - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Happy New Year 2016 published at the 'play' market has multiple vulnerabilities...

New Year Stickers - 2016 Cards - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year Stickers - 2016 Cards published at the 'play' market has multiple vulnerabilities...

March 8, 2016, update for Visio 2016 (KB3114844)

None None...

Dridex Botnet Resumes Spam Operations After the Holidays

FireEye Labs observed that Dridex operators were active during the holiday season. However, during the post-Christmas and New Year weeks, we observed a slowdown in their spam campaigns. Interestingly, their breaks were short. Over the past few weeks they have resumed operations and are building...

Spotify - CSRF & Privilege Escalation Vulnerability

Document Title: =============== Spotify - CSRF & Privilege Escalation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1691 Video: https://www.youtube.com/watch?v=4axUu5xUtjM Guest Article:...

joinmuse.ru Open Redirect vulnerability

Vulnerable URL: http://joinmuse.ru/forum/go.php?https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5163716 Google Pagerank| 2 VIP website status:| N...

CVE-2015-7756

creationtimestamp| type| source ---|---|--- 2016-01-18 18:52:16+00:00| seen| https://t.me/ictsecurity/102...

Chakra JavaScript Engine: Microsoft Open-Sources the Heart of Edge browser

Microsoft has announced the plans to open source the core components of its "Chakra" – the JavaScript engine behind the new Edge browser – to GitHub code-sharing and collaboration repository next month. The company made this announcement at the JSConf US Last Call conference in Florida this...

wireshark: WCP dissector crash (wnpa-sec-2015-14)

A flaw was found in WCP dissector of wireshark of which an attacker could crash wireshark by injecting a specially crafted packet onto the wire or by convincing wireshark user to read malformed packet trace file...

15-year-old Boy Arrested in connection with TalkTalk Cyber Attack

The arrest is the first major outcome since TalkTalk – the biggest phone and broadband provider in the UK with more than 4 Million customers – had suffered a serious data breach. The Police Service of Northern Ireland PSNI and the investigating officers from the Metropolitan police's cyber crime...

Mitsubishi Electric MELSEC FX3G PLC Device Resource Management Error Vulnerability

The Mitsubishi Electric MELSEC FX3G PLC is a programmable logic controller PLC product of the MELSEC FX series from Mitsubishi Electric Japan. A security vulnerability exists in the HTTP application of the Mitsubishi Electric MELSEC FX3G PLC device for products prior to the 2015.4 date. A remote...