Lucene search

K
hackappHackapp.orgHACKAPP:COM.PERSIANCALENDAR.APPLEX.APK
HistoryJun 15, 2017 - 12:03 a.m.

تقویم فارسی 96 - Exported components, External URLs, Possible privilege escalation vulnerabilities

2017-06-1500:03:35
Hackapp.org
hackapp.com
7

HackApp vulnerability scanner discovered that application تقویم فارسی 96 published at the ‘play’ market has multiple vulnerabilities.

Name

تقویم فارسی 96

Vendor

AppLex

Link

COM.PERSIANCALENDAR.APPLEX.APK

Store

play

Version

2.0.8
  • MEDIUM
  • Exported components

    Other applications could access the interfaces.

  • Runtime command execution

    Function 'Runtime.getRuntime().exec()' is used, please check where variables are come from.

  • SD-card access

    SD-cards and other external storages have 'worldwide read' policy.

  • NOTICE
  • Possible privilege escalation

    This app is looking for root tools.

  • External URLs

    Where do they point?

  • Suspicious files

    Are you sure these files should be here?

  • Unsafe deleting

    All items deleted with 'file.delete()' could be recovered.