Starbucks: CSRF in Report Lost or Stolen Page https://www.starbucks.com/account/card

Hi, When a user registers with an option to get instant digital card, a card will be registered against that users name. There is CSRF in card removal process when user wants to report cards as stolen or lost. There is no CSRF protection on the post requests when...

Centrum - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Centrum published at the 'play' market has multiple vulnerabilities...

BalkaniYUmTVzaTelefonHttp - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application BalkaniYUmTVzaTelefonHttp published at the 'play' market has multiple vulnerabilities...

KeePassDroid - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application KeePassDroid published at the 'play' market has multiple vulnerabilities...

3 Nigerian Scammers Get 235-Years of Total Jail Sentence in U.S.

You may have heard of hilarious Nigerian scams. My all time favourite is this one: A Nigerian astronaut has been trapped in space for the past 25 years and needs $3 million to get back to Earth, Can you help? Moreover, Nigerians are also good at promising true love and happiness. But You know, Lo...

Giniko Afghan TV - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Giniko Afghan TV published at the 'play' market has multiple vulnerabilities...

CVE-2017-2161

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors...

CVE-2017-2162

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser...

CVE-2017-2162

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser...

Authentication flaw

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors...

CVE-2017-2161

CVE-2017-2161 affects Toshiba FlashAir SDHC Memory Cards: SD-WE Series ≤ V3.00.02 and SD-WD/WC Series ≤ V2.00.04 allow authenticated attackers to bypass access restrictions and obtain unauthorized image data via unspecified vectors. Root cause is failure to restrict access permissions in PhotoSha...

CVE-2017-2162

The CVE-2017-2162 entry affects Toshiba FlashAir SDHC memory cards (SD-WE Series <W-03; V3.00.02 and earlier) and (SD-WD/WC Series

CVE-2017-2161

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors...

CVE-2017-2162

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser...

VMware Workstation for Linux 12.5.2 build-4638234 - ALSA Configuration Host Local Privilege Escalation

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1142 This vulnerability permits an unprivileged user on a Linux machine on which VMWare Workstation is installed to gain root privileges. The issue is that, for VMs with audio, the privileged VM host process loads libasound, whic...

VMware Workstation ALSA Config File Local Privilege Escalation

This module exploits a vulnerability in VMware Workstation Pro and Player on Linux which allows users to escalate their privileges by using an ALSA configuration file to load and execute a shared object as root when launching a virtual machine with an attached sound card. This module has been...

VMware Workstation for Linux 12.5.2 build-4638234 - ALSA Config Host Root Privilege Escalation Explo

Exploit for linux platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1142 This vulnerability permits an unprivileged user on a Linux machine on which VMWare Workstation is installed to gain root privileges. The issue is that, for VMs with audio...

İzsu Genel Müdürlüğü - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application İzsu Genel Müdürlüğü published at the 'play' market has multiple vulnerabilities...

Instant Likes - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Likes published at the 'play' market has multiple vulnerabilities...

CVE-2017-8769

Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect...