Mail.ru: Self-xss via drag&drop in email form

User-assisted XSS in message composer's drag-n-drop feature via alt property of emoji-style image...

Flash Keyboard - Emoji & Theme - Dangerous filesystem permissions, Exported ContentProvider, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Flash Keyboard - Emoji & Theme published at the 'play' market has multiple vulnerabilities...

Slack: The Custom Emoji Page has a Reflected XSS

The Custom Emoji Page has a Reflected XSS in building flash message. The following is the PoC. https://team.slack.com/customize/emoji?added=1&name=vuln"alert0;...

June 13, 2017—KB4022715 (OS Build 14393.1358)

None None...

Emoji Keyboard Cute Emoticons - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Emoji Keyboard Cute Emoticons published at the 'play' market has multiple vulnerabilities...

You Can Crash Anyone's iPhone Or iPad With A Simple Emoji Text Message

A newly discovered bug in Apple's iOS mobile operating system is being exploited in a prank that lets anyone crash your iPhone or iPad by just sending an emoji-filled iMessage, according to several reports. YouTube star EverythingApplePro published a video highlighting a sequence of characters th...

Bitmoji – Your Personal Emoji - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Bitmoji – Your Personal Emoji published at the 'play' market has multiple vulnerabilities...

CVE-2016-4852

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

CVE-2016-4852

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

Design/Logic Flaw

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

CVE-2016-4852

CVE-2016-4852 affects YoruFukurou (NightOwl) for OS X, where emoji skin-tone modifiers are mishandled because CTFramesetter API support is missing on OS X 10.9. The vulnerability allows a crafted emoji sequence to crash the application (DoS). Affected versions include 2.84 and earlier (pre-2.85)....

CVE-2016-4852

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

PT-2016-6179

Name of the Vulnerable Software and Affected Versions YoruFukurou NightOwl versions prior to 2.85 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted emoji character sequence. This is because YoruFukurou relies on support fo...

CVE-2016-4852: Improper Input Validation

YoruFukurou NightOwl before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service application crash via a crafted emoji character sequence...

YoruFukurou (NightOwl) vulnerable to denial-of-service (DoS)

Overview YoruFukurou NightOwl is a Twitter client application for OS X. YoruFukurou uses OS X API CTFramesetter to render text contents. CTFramesetter has a problem in processing a certain emoji character sequence, which may cause YoruFukurou to crash. This problem was verified on OS X v10.9...

JVN#94816361: YoruFukurou (NightOwl) vulnerable to denial-of-service (DoS)

YoruFukurou NightOwl is a Twitter client application for OS X. YoruFukurou uses OS X API CTFramesetter to render text contents. CTFramesetter has a problem in processing a certain emoji character sequence, which may cause YoruFukurou to crash. This problem was verified on OS X v10.9 Mavericks. Th...

iKeyboard - emoji, emoticons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application iKeyboard - emoji, emoticons published at the 'play' market has multiple vulnerabilities...

Kika Emoji Keyboard - GIF Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kika Emoji Keyboard - GIF Free published at the 'play' market has multiple vulnerabilities...

Emoji Quiz - Guess Emoji - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Emoji Quiz - Guess Emoji published at the 'play' market has multiple vulnerabilities...

GuessUp : Guess Up Emoji - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application GuessUp : Guess Up Emoji published at the 'play' market has multiple vulnerabilities...