Finger Body Temperature Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finger Body Temperature Prank published at the 'play' market has multiple vulnerabilities...

Princess Full-Body SPA - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Princess Full-Body SPA published at the 'play' market has multiple vulnerabilities...

Body Plastic Surgery - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Body Plastic Surgery published at the 'play' market has multiple vulnerabilities...

BIKINI - Body shaping App - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BIKINI - Body shaping App published at the 'play' market has multiple vulnerabilities...

BMI 3D - Body Mass Index in 3D - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application BMI 3D - Body Mass Index in 3D published at the 'play' market has multiple vulnerabilities...

XRay Body Scanner Simulator - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application XRay Body Scanner Simulator published at the 'play' market has multiple vulnerabilities...

Body Mass Index - Weight loss - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Body Mass Index - Weight loss published at the 'play' market has multiple vulnerabilities...

Moto Body - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Moto Body published at the 'play' market has multiple vulnerabilities...

Drawing The Human Body - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Drawing The Human Body published at the 'play' market has multiple vulnerabilities...

Learn Body Parts in German - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Learn Body Parts in German published at the 'play' market has multiple vulnerabilities...

Amazon Linux AMI : tomcat6 (ALAS-2016-656)

It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could use this flaw to bypass security manager protections. CVE-2014-7810 It was found that Tomcat would keep connections open after processing requests with a...

Mozilla: Use-after-free in SetBody (MFSA 2016-24)

Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of a root element, aka ZDI-CAN-3574...

Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ====================================...

Inside the Conficker-Infected Police Body Cameras

Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...

Cisco IOS/IOS XE SSHv2 Body Authentication Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE Software have a security vulnerability in the implementation of the SSHv2 protocol. A remote attacker could exploit this vulnerability to bypass the user...

the-body-shop.it XSS vulnerability

Vulnerable URL: http://www.the-body-shop.it/it/catalogsearch/result/?q="...

calculator.net XSS vulnerability

Vulnerable URL: http://www.calculator.net/body-fat-calculator.html?ctype=standard=m===1==='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7313 Google Pagerank| 5 VIP website...

Shopify: Body injection in mailto link while commenting shop blog

While commenting shop blog an attacker can inject a body attribute in email so it will be interpreted by shop administrator email-client. Attacker can make the request below to send the malicious comment: http POST /blogs/news/18286141-first-post/comments HTTP/1.1 Host: test-4579.myshopify.com...

Dream Multimedia DreamBox DM500-S Cross-Site Scripting Vulnerability

Dream Multimedia DreamBox DM500-S is a Linux-based digital TV set-top box receiver from Dream Multimedia, Germany. A cross-site scripting vulnerability exists in the Dream Multimedia DreamBox DM500-S. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML v...

CVE-2015-4657: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted URL...