Dashlane - DLL Hijacking

Dashlane - DLL Hijacking Vulnerability Summary The following advisory describes a DLL Hijacking vulnerability found in Dashlane. Dashlane is “a password manager app and secure digital wallet. The app is available on Mac, PC, iOS and Android. The app’s premium feature enables users to securely syn...

90 numbers - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 90 numbers published at the 'play' market has multiple vulnerabilities...

Get Instant likes - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Get Instant likes published at the 'play' market has multiple vulnerabilities...

Balance. Финансовое равновесие - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Balance. Финансовое равновесие published at the 'play' market has multiple vulnerabilities...

SayHi Chat, Love, Meet, Dating - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SayHi Chat, Love, Meet, Dating published at the 'play' market has multiple vulnerabilities...

CVE-2017-9575

The "FVB Mobile Banking" by First Volunteer Bank of Tennessee app 3.1.1 -- aka fvb-mobile-banking/id551018004 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9595

The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2017-9576

CVE-2017-9576 affects the iOS version of the Middleton Community Bank Mobile Banking app (3.0.0), where the app does not verify X.509 certificates when establishing SSL/TLS connections. This weakness can allow a man-in-the-middle attacker to spoof legitimate servers and exfiltrate sensitive infor...

CVE-2017-9587

The CVE-2017-9587 entry concerns the PCSB BANK Mobile iOS app (version 3.0.4, identifier pcsb-bank-mobile/id1067472090) that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected documen...

CVE-2017-9572

The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

GIPHY Stickers - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GIPHY Stickers published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

OrangePlay - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application OrangePlay published at the 'play' market has multiple vulnerabilities...

Home TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Home TV published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

rifcity.de - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application rifcity.de published at the 'play' market has multiple vulnerabilities...

Idle Heroes - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Idle Heroes published at the 'play' market has multiple vulnerabilities...

Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Lyft - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lyft published at the 'play' market has multiple vulnerabilities...