FxGuru: Movie FX Director - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FxGuru: Movie FX Director published at the 'play' market has multiple vulnerabilities...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

Path traversal

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

CVE-2016-9364

CVE-2016-9364 affects Fidelix FX-20 series controllers (versions prior to 11.50.19). The vulnerability is a path traversal weakness that allows an attacker to perform arbitrary file reading, accessing files and directories on the server. Exploitation is described as remote in the ICS-CERT advisor...

PT-2017-10088

Name of the Vulnerable Software and Affected Versions Fidelix FX-20 series controllers versions prior to 11.50.19 Description An issue allows arbitrary file reading via path traversal, enabling an attacker to access arbitrary files and directories on the server. Recommendations For versions prior...

CVE-2016-9364: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. Arbitrary file reading via path traversal allows an attacker to access arbitrary files and directories on the server...

DEBIAN-CVE-2016-9298

Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service crash via a crafted image...

hg.mozilla.org XSS vulnerability

Vulnerable URL: https://hg.mozilla.org/integration/fx-team/pushloghtml?user=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

ImageMagick ' MagickCore/fx.c' Heap Buffer Overflow Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick ' MagickCore/fx.c', which can be exploited by an attacker t...

Fidelix FX-20 Series Controllers Path Traversal Vulnerability

OVERVIEW Researcher Semen Rozhkov of Kaspersky Lab has identified a path traversal vulnerability in Fidelix’s FX-20 series controllers. Fidelix has produced a new software version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Fidelix reports tha...

DEBIAN-CVE-2016-3498

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...

Oracle Java SE JavaFX Subcomponent Denial of Service Vulnerability

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the JavaFX subcomponent of...

PT-2016-2153

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 PDFium affected versions not specified Description The issue is related to the incorrect handling of certain index values in the core/fxge/ge/fx ge text.cpp component of PDFium, used in Google Chrom...

Draw with Powertools FX - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Draw with Powertools FX published at the 'play' market has multiple vulnerabilities...

Quadcopter FX Simulator - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Quadcopter FX Simulator published at the 'play' market has multiple vulnerabilities...

Rotate Video FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Rotate Video FX published at the 'play' market has multiple vulnerabilities...

Slow Motion Video FX - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Slow Motion Video FX published at the 'play' market has multiple vulnerabilities...

Currency FX Rates Converter - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Currency FX Rates Converter published at the 'play' market has multiple vulnerabilities...