Canon IR-ADV Password Extractor

An authentication bypass vulnerability exists in Canon IR-ADV. A remote attacker can exploit this vulnerability by extracting the passwords from address books on various Canon IR-Adv mfp devices...

maclace.com.au XSS vulnerability

Vulnerable URL: http://www.maclace.com.au/product-cat.php?cat=Books Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2795494 VIP website status:| No Check maclace.com.au SSL...

MOVING BOOKS! Jajajajan Arabic - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MOVING BOOKS! Jajajajan Arabic published at the 'play' market has multiple vulnerabilities...

MOVING BOOKS! Jajajajan - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MOVING BOOKS! Jajajajan published at the 'play' market has multiple vulnerabilities...

Fairy Tales ~ 3D Pop-up Books! - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fairy Tales 3D Pop-up Books! published at the 'play' market has multiple vulnerabilities...

Google Play Books - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Google Play Books published at the 'play' market has multiple vulnerabilities...

MortPlayer Audio Books - Exported components, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application MortPlayer Audio Books published at the 'play' market has multiple vulnerabilities...

Kobo Books - Reading App - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kobo Books - Reading App published at the 'play' market has multiple vulnerabilities...

White Tiger Books - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application White Tiger Books published at the 'play' market has multiple vulnerabilities...

English Audio Books - Librivox - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application English Audio Books - Librivox published at the 'play' market has multiple vulnerabilities...

Free Books - 23,469 Classics - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free Books - 23,469 Classics published at the 'play' market has multiple vulnerabilities...

Audio Books by Audiobooks - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Audio Books by Audiobooks published at the 'play' market has multiple vulnerabilities...

Audio Books Free - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Audio Books Free published at the 'play' market has multiple vulnerabilities...

Free books to download & read - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free books to download & read published at the 'play' market has multiple vulnerabilities...

LibriVox Audio Books Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LibriVox Audio Books Free published at the 'play' market has multiple vulnerabilities...

Wattpad - Free Books & Stories - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wattpad - Free Books & Stories published at the 'play' market has multiple vulnerabilities...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

Information disclosure

The 100 Books aka com.ireadercity.c20 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7493

CVE-2014-7493 applies to The 100 Books (com.ireadercity.c20) Android app v3.0.2, where SSL certificate validation is not performed for X.509 certificates. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing SSL c...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...