1784 matches found
CVE-2019-17355
In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...
Default credentials
In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...
CVE-2018-20582
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
Dangbei Marketplace An Android version of the APP has a logic flaw vulnerability
Founded in August 2013, Hangzhou Dangbei Network Technology Co., Ltd. is currently one of the well-known value-added service providers of intelligent big screen in China. There is a logic flaw vulnerability in the Android version of Dangbei Market An APP, which allows an attacker to tamper with t...
CVE-2019-1265
A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy...
Joker Spyware Found in 24 Google Play Apps
A new spyware has been making the rounds in Android apps on Google Play, infecting victims post-download to steal their SMS messages, contact lists and device information. In addition to stealing victims’ information, the malware also stealthily signs them up for premium service subscriptions tha...
Alfresco Software Alfresco application for Android SQL Injection Vulnerability
Alfresco Software Alfresco application for Android is an application for accessing Alfresco on the Android platform from Alfresco Software, USA. An SQL injection vulnerability exists in the HistorySearchProvider.java file in versions of the Alfresco Software Alfresco application for Android...
WARNING — Malware Found in CamScanner Android App With 100+ Million Users
Beware! Attackers can remotely hijack your Android device and steal data stored on it, if you are using free version of CamScanner, a highly-popular Phone PDF creator app with more than 100 million downloads on Google Play Store. So, to be safe, just uninstall the CamScanner app from your Android...
Spyware App on Google Play Gets Boot, Returns Days Later
A music-streaming app offered on Google Play, harboring spyware that stole victims’ contacts, files and SMS messages, made its way onto the official Android app marketplace not once, but twice. The spyware was hidden in an app called Radio Balouch also known as RB Music. The app itself was actual...
CVE-2019-14516
The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks against requests for FAQs or Help...
Facebook Sues Two Android App Developers for Click Injection Fraud
Facebook has filed a lawsuit against two shady Android app developers accused of making illegal money by hijacking users' smartphones to fraudulently click on Facebook ads. According to Facebook, Hong Kong-based 'LionMobi' and Singapore-based 'JediMobi' app developers were distributing malicious...
BCM Messenger: IDOR leading to downloading of any attachment
Description: Hey team, I came across an endpoint on your android app which could be used to download any attachment which is being uploaded onto your server. All the attacker needs to do is bruteforce the simple ID which surprisingly is a randomly generated number I personally think it's based on...
Nextcloud Android app input validation error vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An input validation error vulnerability exists in the Nextcloud Android app. An attacker can exploit the vulnerability to obtain sensitive information...
Nextcloud Android app input validation error vulnerability (CNVD-2019-41896)
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An input validation error vulnerability exists in the Nextcloud Android app. An attacker could exploit the vulnerability to repeatedly open and close target files...
Nextcloud Android app SQL injection vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. A SQL injection vulnerability exists in the Nextcloud Android app versions prior to 3.0.0. The vulnerability stems from a lack of validation of externally entered SQL statements in...
Nextcloud Android app information disclosure vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. An information disclosure vulnerability exists in the Nextcloud Android app versions prior to 3.3.0. The vulnerability stems from errors such as configuration during operation of t...
Nextcloud Android app code injection vulnerability
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. A code injection vulnerability exists in versions of the Nextcloud Android app prior to 3.7.0, which arises from the failure of a network system or product to properly filter...
X (Formerly Twitter): protected Tweet settings overwritten by other settings
protected tweet settings will be disabled without the account owner's knowledge step for reproduction 1.Log in to an account with unprotected tweets on the Android app. 2. Log in to the same account on mobile.twitter.com and turn on protected tweets. 3. Confirm that the account's tweets are...