Picture Quiz: Logos Answer - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Picture Quiz: Logos Answer published at the 'play' market has multiple vulnerabilities...

Zgadnij co to? - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zgadnij co to? published at the 'play' market has multiple vulnerabilities...

Cato and Macro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cato and Macro published at the 'play' market has multiple vulnerabilities...

Shift Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Shift Free published at the 'play' market has multiple vulnerabilities...

Slots Lost Treasure Slot Games - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Slots Lost Treasure Slot Games published at the 'play' market has multiple vulnerabilities...

Candy Blast Mania - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Candy Blast Mania published at the 'play' market has multiple vulnerabilities...

SpeedBoat Shooting - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SpeedBoat Shooting published at the 'play' market has multiple vulnerabilities...

hi5 - Meet New People - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application hi5 - Meet New People published at the 'play' market has multiple vulnerabilities...

Siren Ringtones - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Siren Ringtones published at the 'play' market has multiple vulnerabilities...

Soothing sleep sounds - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Soothing sleep sounds published at the 'play' market has multiple vulnerabilities...

1 Second Everyday - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 1 Second Everyday published at the 'play' market has multiple vulnerabilities...

RHE - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application RHE published at the 'play' market has multiple vulnerabilities...

Crazy About Startups - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Crazy About Startups published at the 'play' market has multiple vulnerabilities...

uShip - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application uShip published at the 'play' market has multiple vulnerabilities...

Zomato: Authentication Bypassing and Sensitive Information Disclosure on Verify Email Address in Registration Flow

The zomato.com web application is vulnerable to authentication bypassing and sensitive information disclosure. The flaw exist in “Verify Email Address” link which is received in a mail after registration. Once the user enters Full Name, Email Address and Password during registration, he/she is...

VMware vRealize Automation Cross-Site Scripting Vulnerability

VMware vRealize Automation is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A cross-site...

Android Widevine Trusted Application Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Widevine Trusted Application is one of the components used to validate the Google DRM platform. A security vulnerability exists in Widevine Trusted Application in version 6.0.1 of...

Dream Gallery 1.0 SQL Injection

Dream Gallery 是国外一个相册程序，album.php 页面通过传入参数 id 的值来查看不同的专辑，由于没有对传入的 id 的值进行过滤，导致存在 SQL 注入，可获取数据名等。 分析 存在问题的文件位置： query "select from albuns order by albumname asc" -fetchAll; if $db-rows = 1 $albuns = $db-data; foreach $albuns as $album $a = object $album; $db-query "select from fotos where fotoalbu...

Secure Item Hub 1.0 XSS / Code Execution / File Upload

Document Title: =============== Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1682 Release Date: ============= 2016-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 16...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...