Chinese New Year - For Kids - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Chinese New Year - For Kids published at the 'play' market has multiple vulnerabilities...

Learn Chinese - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese - 50 languages published at the 'play' market has multiple vulnerabilities...

Monki Chinese Class: For Kids - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Monki Chinese Class: For Kids published at the 'play' market has multiple vulnerabilities...

Learn Chinese Mandarin Words - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese Mandarin Words published at the 'play' market has multiple vulnerabilities...

Speak Mandarin Chinese Free - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Speak Mandarin Chinese Free published at the 'play' market has multiple vulnerabilities...

Learn Chinese - HelloChinese - Exported components, SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese - HelloChinese published at the 'play' market has multiple vulnerabilities...

Learn Chinese - ChineseSkill - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese - ChineseSkill published at the 'play' market has multiple vulnerabilities...

Chinese Checkers - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chinese Checkers published at the 'play' market has multiple vulnerabilities...

Chinese Food - Lunar New Year! - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chinese Food - Lunar New Year! published at the 'play' market has multiple vulnerabilities...

Chinese Checkers Online - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chinese Checkers Online published at the 'play' market has multiple vulnerabilities...

Chinese Checkers Touch - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chinese Checkers Touch published at the 'play' market has multiple vulnerabilities...

Pleco Chinese Dictionary - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Pleco Chinese Dictionary published at the 'play' market has multiple vulnerabilities...

Microsoft built a special version of Windows 10 just for Chinese Government

China is very strict about censorship, which makes it difficult for companies to launch their products in the country. But companies like Microsoft are playing smartly to target the largest market in the world. Microsoft has found a way to enter into the banned Chinese Market, but this time with...

Wiping Out a Malicious Campaign Abusing Chinese Ad Platform

At FireEye Labs, we have discovered another well-crafted malvertising campaign that uses the ad API of one of the world’s largest search engines: China-based Baidu. The attacker employs a simple HTML redirector instead of shellcode or an exploit in an apparently benign-looking website. This leads...

chinese-tools.com XSS vulnerability

Open Bug Bounty ID: OBB-141841 Description| Value ---|--- Affected Website:| chinese-tools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Chinese ISPs Caught Injecting Ads and Malware into Web Pages

China has gained a considerable global attention when it comes to their Internet policies in the past years; whether it's introducing its own search engine dubbed "Baidu," Great Firewall of China, its homebrew China Operating System COP and many more. Along with the developments, China has long...

Rogue Chinese iOS App Removed from App Store

Apple removed an iOS application from its Chinese iTunes App Store that allowed users of non-jailbroken iOS devices to install pirated and jailbroken apps. Researchers at Palo Alto Networks, who discovered the rogue application, said the app was not malicious, but presented a serious security ris...

Maimed Ramnit Still Lurking in the Shadow

Newspapers have the ability to do more than simply keep us current with worldly affairs; we can use them to squash bugs! Yet, as we move from waiting on the newspaper delivery boy to reading breaking news on ePapers, we lose the subtle art of bug squashing. Instead, we end up exposing ourselves t...

Mageia: Security Advisory (MGASA-2016-0072)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libgcrypt packages fix security vulnerabilities

Updated libgcrypt packages fix security vulnerability: Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that the ECDH secret decryption keys in applications using the libgcrypt20 library could be leaked via a side-channel attack CVE-2015-7511. The libgcrypt package was also...