Android Package Inspector: Inspeckage

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...

CVE-2017-2682

CVE-2017-2682 concerns Siemens RUGGEDCOM NMS web application CSRF vulnerability. The issue affects RUGGEDCOM NMS versions prior to V2.1.0 and involves the web interface on ports 8080/TCP and 8081/TCP, where a remote attacker could induce an authenticated user to perform administrative operations ...

QIB Aman - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application QIB Aman published at the 'play' market has multiple vulnerabilities...

[root] Overscan - Exported components, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application root Overscan published at the 'play' market has multiple vulnerabilities...

IBM WebSphere Message Broker Clickjacking Vulnerability

IBM WebSphere Message Broker now known as IBM Integration Bus is an enterprise service bus ESB product from IBM, USA. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A clickjacking vulnerability exists ...

MMS settings - Data Help - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MMS settings - Data Help published at the 'play' market has multiple vulnerabilities...

Private SMS & Call - Hide Text - Base64 encoded String, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Private SMS & Call - Hide Text published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

CVE-2016-5801

CVE-2016-5801 affects OmniMetrix OmniView (Version 1.2). Root cause: weak password requirements allow brute-forcing credentials over HTTP, enabling remote access. Impact per sources: credential compromise could enable control of associated backup generators. Mitigation details in public documents...

shopify-scripts: Heap buffer oveflow with many arguments

The following program triggers a heap buffer overflow: ruby d 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0...

OWASP Security Knowledge Framework - An expert system application that uses OWASP Application Security Verification Standard

Security Knowledge Framework is an expert system application that uses OWASP Application Security Verification Standard, code examples, helps developers in pre-development and post-development. Introduction Our experience taught us that the current level of security the current web-applications...

Музыка ВКонтакте ВК - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Музыка ВКонтакте ВК published at the 'play' market has multiple vulnerabilities...

Mobile Cash - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Cash published at the 'play' market has multiple vulnerabilities...

Radisys MRF - Command Injection

Radisys MRF - Command Injection Title: MRF Web Panel OS Command Injection Vendor: Radisys Vendor Homepage: http://www.radisys.com Product: MRF Web Panel SWMS Version: 9.0.1 CVE: CVE-2016-10043 CWE: CWE-78 Risk Level: High Discovery: Filippos Mastrogiannis, Loukas Alkis & Dimitrios Maragkos COSMOT...

Ameria Mobile Banking - BSD license, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ameria Mobile Banking published at the 'play' market has multiple vulnerabilities...

Ford Prosys - External URLs, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Ford Prosys published at the 'play' market has multiple vulnerabilities...

LocalTapiola: SQL Injection on /webApp/lapsuudenturva (viestinta.lahitapiola.fi)

Issue The reporter found a blind SQL Injection attack in an application in viestinta.lahitapiola.fi. Fix The issue was investigated and found to be valid. The fix was to remove the application as it was not needed. Reasoning The reported case was valid and within the scope of the bug bounty...

LocalTapiola: Blacklist bypass for /cs/Satellite (www.lahitapiola.fi)

Issue The reporter found issues related to previous reports: 164581 and 164578 . It was found to be possible to circumvent some of the protections that have been put in place earlier on to prevent access to protected resources within the Oracle Webcenter Sites application. The issues were...

American English Conversation - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application American English Conversation published at the 'play' market has multiple vulnerabilities...

Collins German Dictionary - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Collins German Dictionary published at the 'play' market has multiple vulnerabilities...