Authentication flaw

The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application...

CVE-2012-1409

Unspecified vulnerability in the Tiny Password com.tinycouch.android.freepassword application 1.64 for Android has unknown impact and attack vectors...

CVE-2012-1408

Unspecified vulnerability in the App Lock com.cc.applock application 1.7.5 and 1.7.6 for Android has unknown impact and attack vectors...

twicca fails to restrict access permissions

Overview twicca contains an issue where access permissions are not restricted. twicca is a client software for using Twitter. twicca contains an issue where access permissions are not restricted. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this...

CVE-2012-1380

Unspecified vulnerability in the NetEaseWeibo com.netease.wb application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors...

CVE-2012-1380

Unspecified vulnerability in the NetEaseWeibo com.netease.wb application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors...

CVE-2012-1406

Unspecified vulnerability in the GO Bookmark Widget com.gau.go.launcherex.gowidget.bookmark application 1.1 for Android has unknown impact and attack vectors...

CVE-2012-1391

Unspecified vulnerability in the mOffice - Outlook sync com.innov8tion.isharesync application 3.1 for Android has unknown impact and attack vectors...

CVE-2012-1400

Unspecified vulnerability in the U+Box 2.0 Pad lg.uplusbox.pad application 2.0.8.4 for Android has unknown impact and attack vectors...

CVE-2012-1402

Unspecified vulnerability in the QianXun YingShi com.qianxun.yingshi application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors...

CVE-2012-1395

Unspecified vulnerability in the GO TwiWidget com.gau.go.launcherex.gowidget.twitterwidget application 1.7 and 2.1 for Android has unknown impact and attack vectors...

CVE-2012-1398

Unspecified vulnerability in the GO WeiboWidget com.gau.go.launcherex.gowidget.weibowidget application 2.4 for Android has unknown impact and attack vectors...

CVE-2011-4704

The Voxofon com.voxofon application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information via a crafted application...

FTC Settles Charges With Android App Developer Over 'Unfair' Default Settings

In a landmark move, the Federal Trade Commission has settled charges it brought against the maker of a P2P file-sharing application that the commission alleged included unfair default settings that caused users to unknowingly share photos, videos and other personal data. The settlement with...

Applications can open up remote root access on G1 Phone

Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...