Digiturk Play Yurtdışı - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Digiturk Play Yurtdışı published at the 'play' market has multiple vulnerabilities...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a s...

Wipro Design - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Wipro Design published at the 'play' market has multiple vulnerabilities...

Why Care About Data-Centric Security?

It’s no surprise that data breaches are evolving and becoming increasingly more complex. According to the Verizon 2017 Data Breach Investigation Report, data breaches are “complex affairs often involving some combination of human factors, hardware devices, exploited configurations or malicious...

Denial Of Service (DoS)

github.com/valyala/fasthttp is vulnerable to denial of service DoS attacks. The library does not define a maximum body size for the packets it receives, allowing a malicious user to exhaust the application's memory by sending large packets to it...

Understanding Your Monthly Security Reports

When we first starting a conversation with our prospects, we are frequently asked, “Just how will I know that Wallarm is working?” To help answer that, let’s take a look at the report we sent to one of our customers last week to understand what kind of threats Wallarm defends agains. Wallarm...

Finance Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finance Manager published at the 'play' market has multiple vulnerabilities...

Cash Organizer - finance - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cash Organizer - finance published at the 'play' market has multiple vulnerabilities...

CVE-2017-3544

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

Get 1000 like n follower Insta - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get 1000 like n follower Insta published at the 'play' market has multiple vulnerabilities...

Five Reasons Why I Joined Wallarm

By Johan Nordstrom The question of “what made you change jobs?” may be old, but the answer with my move to Wallarm is new and clear. I have a vision how to address the dynamic threat landscape of today and Wallarm’s innovative approach to security is in line with these ideas. In my 30 years caree...

KEOS Nilüfer - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application KEOS Nilüfer published at the 'play' market has multiple vulnerabilities...

Play the guitar master prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Play the guitar master prank published at the 'play' market has multiple vulnerabilities...

GlobaLeaks: Information Disclosure

I have observed that the application is leaking information while accessing "https://demo.globaleaks.org/l10n/en". It does not restrict access to file, which can possibly provide an attacker with information such as default credentials test:test, username for accessing administrative functions,...

Planet Televizija - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Planet Televizija published at the 'play' market has multiple vulnerabilities...

InsightVM: Analytics-driven Vulnerability Management, All The Way To The End(point)

In 2015 Rapid7 introduced the Insight platform, built to reduce the complexity inherent in security analytics. This reality was introduced first to our InsightIDR users, who now had the capabilities of a SIEM, powered by user behavior analytics UBA and endpoint detection. Soon we started to roll...

TBC Bank - Corrupted files, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application TBC Bank published at the 'play' market has multiple vulnerabilities...

CVE-2016-10320

Textract (Python library) for versions before 1.5.0 is affected by CVE-2016-10320 due to an OS command injection vulnerability in the process function triggered by a filename. The issue could enable a remote attacker to execute arbitrary commands in scenarios where a web application accepts names...

ParaMara - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ParaMara published at the 'play' market has multiple vulnerabilities...

Why moats and castles belong in the past

We are all familiar with the enterprise security approach of treating an organization like a castle, and protecting it with a moat. Moats have been used for perimeter defense since ancient Egypt. While the moat and castle enterprise security approach has worked well in the past it is starting to...