Open Redirection

github.com/gogs/gogs is vulnerable to open redirection. The isValidRedirect function does not properly validate an external URL and allows redirections to external URLs...

Catch! - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Catch! published at the 'play' market has multiple vulnerabilities...

Starbucks: Open Redirect on /account/signin?ReturnUrl

The attacker can redirect the victim just after the authentication. Open redirect on Login page: https://www.starbucks.com/account/signin?ReturnUrl= Steps to reproduce Go to Login Page. https://www.starbucks.com/account/signin?ReturnUrl=%2faccount%2fHome The paramter: ReturnUrl can be modified as...

Untappd - Discover Beer - BSD license, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Untappd - Discover Beer published at the 'play' market has multiple vulnerabilities...

Fastest Flashlight - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Fastest Flashlight published at the 'play' market has multiple vulnerabilities...

HQ Trivia (Unreleased) - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HQ Trivia Unreleased published at the 'play' market has multiple vulnerabilities...

Dojo by BullGuard - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dojo by BullGuard published at the 'play' market has multiple vulnerabilities...

Invoice – BizXpert - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Invoice – BizXpert published at the 'play' market has multiple vulnerabilities...

المسافر لحجز الفنادق و الطيران - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application المسافر لحجز الفنادق و الطيران published at the 'play' market has multiple vulnerabilities...

Ground Ops - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Ground Ops published at the 'play' market has multiple vulnerabilities...

DATA WING - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DATA WING published at the 'play' market has multiple vulnerabilities...

LinkedIn - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application LinkedIn published at the 'play' market has multiple vulnerabilities...

Barclays Mobile Banking - Customized SSL, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Barclays Mobile Banking published at the 'play' market has multiple vulnerabilities...

imprezy i koncerty - PartyMap - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application imprezy i koncerty - PartyMap published at the 'play' market has multiple vulnerabilities...

Easy Solar Photovoltaic Design - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Easy Solar Photovoltaic Design published at the 'play' market has multiple vulnerabilities...

AlfaStrakhovanie Mobile - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application AlfaStrakhovanie Mobile published at the 'play' market has multiple vulnerabilities...

DreamTV - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DreamTV published at the 'play' market has multiple vulnerabilities...

Netvisor ID - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Netvisor ID published at the 'play' market has multiple vulnerabilities...

Shopify: Sell Online Ecommerce - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Shopify: Sell Online Ecommerce published at the 'play' market has multiple vulnerabilities...

New YAHTZEE® With Buddies – Fun Game for Friends - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application New YAHTZEE® With Buddies – Fun Game for Friends published at the 'play' market has multiple vulnerabilities...