MDPlayer - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MDPlayer published at the 'play' market has multiple vulnerabilities...

Fluid Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fluid Watch Face published at the 'play' market has multiple vulnerabilities...

Talk to HUE Trial - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Talk to HUE Trial published at the 'play' market has multiple vulnerabilities...

Material Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Material Watch Face published at the 'play' market has multiple vulnerabilities...

きかんしゃトーマスとパズルであそぼう！子供向け無料知育アプリ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application きかんしゃトーマスとパズルであそぼう！子供向け無料知育アプリ published at the 'play' market has multiple vulnerabilities...

Vibrator Secret For Women - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Vibrator Secret For Women published at the 'play' market has multiple vulnerabilities...

Monkey race ray! RSA conference badge scanning application broke vulnerability-vulnerability warning-the black bar safety net

Recently, the BLUE BOX company's security researchers found: RSA 2 0 1 6 The General Assembly on the use of badge scanning APP there is a hard-coded default passwords. This year, RSA 2 0 1 6 The participants will get a unique surprise: the General Assembly, as many manufacturers offer a Samsung...

Traffic CMS 1.4.x Local File Inclusion Vulnerability

Traffic CMS version 1.4.x suffers from a local file inclusion vulnerability. Traffic CMS v1.4.x = Local File Inclusion Vulnerability My + Author : KnocKout Contact : email protected HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com Þeker Insanlar : ZoRLu, milw00rm.com , Septemb0x ,...

MiTo Xiu Xiu, the gReader, the Foxit PDF reader in the column: 1 4, of Android apps vulnerable to MiTM attacks-vulnerability warning-the black bar safety net

! AppBugs company researchers through the analysis found that there are 1 4 Total Total Download amount up to 8 million times the popular APP in processing social account login when there is a security risk, vulnerable to MiTM hijacking（MITM attack is. Problem application list MeituPic MiTo Xiu...

Acunetix v10 - Web Application Security Testing Tool

Acunetix, the pioneer in automated web application security software, has announced the release of version 10 of its Vulnerability Scanner. New features are designed to prevent the risk of hacking for all customers; from small businesses up to large enterprises, including WordPress users, web...

CVE-2015-0343

Cross-site scripting XSS vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2015-0344

CVE-2015-0344 affects Adobe Connect Web App prior to version 9.4 with a Cross-Site Scripting (XSS) vulnerability allowing remote script/HTML injection via unspecified vectors. Impact: potential data exposure/sessions manipulation as per CVSS 2.0 metrics (I:P). Remediation: upgrade to Adobe Connec...

Kankun Smart Socket / Mobile App Hardcoded AES Key

Hi List, Vulnerability ============= Hardcoded AES 256 bit key used in Kankun IoT/Smart socket and its mobile App Vulnerability Description ========================== The kankun smart socket device and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between th...

Android DropBox SDK Vulnerability, CVE-2 0 1 4-8 8 8 9 analysis-vulnerability warning-the black bar safety net

Today, personal data are stored in the cloud, which makes it like a photo backup or General storage as service can not only be accessed by the user, can also be representative of the user of the app the access. In many ways, including access to the control functions of the app and the service...

Google Now Manually Reviews Play Store Android App Submissions

Google has changed the way it managed apps on the Google Play Store. After years of depending on the automated app check process, the company just made some changes to its Play Store policies that will successfully weed out malicious and undesirable apps from Google Play store. Google has...

Firing Range — Open Source Web App Vulnerability Scanning Tool From Google

Google on Tuesday launched a Security testing tool "Firing Range", which aimed at improving the efficiency of automated Web application security scanners by evaluating them with a wide range of cross-site scripting XSS and a few other web vulnerabilities seen in the wild. Firing Range basically...

Information disclosure

The Touriosity Travelmag aka com.magzter.touriositytravelmag application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7640

The CVE-2014-7640 entry concerns The Hotel Room (com.wHotelRoom) Android app version 0.1. The affected component is the app’s SSL/TLS certificate verification, which does not verify X.509 certificates from SSL servers. This omission allows man-in-the-middle attackers to impersonate legitimate ser...

Information disclosure

The Anderson Musaamil aka com.appandersonmusaamil.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...