CVE-2016-4046

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...

PT-2016-5818

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.1-rev11 Description An issue allows the API for configuring external mail accounts to be exploited, enabling access to network components within the operator's trust boundary. Users can inject...

Вызов Намба Такси Namba Taxi - Certificates or keys found, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Вызов Намба Такси Namba Taxi published at the 'play' market has multiple vulnerabilities...

Propana Reload - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Propana Reload published at the 'play' market has multiple vulnerabilities...

Renault Connected Car - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Renault Connected Car published at the 'play' market has multiple vulnerabilities...

Dirty Cow Vulnerability Patched in Android Security Bulletin

The Dirty Cow vulnerability lived in Linux for close to a decade, and while it was patched in October in the kernel and in Linux distributions, Android users had to wait for more than a month for their fix. Today, Google included a patch for CVE-2016-5195 in the monthly Android Security Bulletin,...

Microsoft Authorization Manager azman XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================== www.microsoft.com Product: ============================== Microsoft Authorization Manager v6.1.7601 The Authorization Manager allows you to set role-based permissions for...

R4S Gateway - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application R4S Gateway published at the 'play' market has multiple vulnerabilities...

SmartPay - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SmartPay published at the 'play' market has multiple vulnerabilities...

ElfYourself by Office Depot - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ElfYourself by Office Depot published at the 'play' market has multiple vulnerabilities...

Google Santa Tracker - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Google Santa Tracker published at the 'play' market has multiple vulnerabilities...

CVE-2016-6753

An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it...

CVE-2016-6753

An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it...

CVE-2016-6752

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6751

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6750

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6749

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6748

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6748

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6698

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...