Goat City Rampage 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Goat City Rampage 3D published at the 'play' market has multiple vulnerabilities...

Goat Farm Animated 3D Piano - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Goat Farm Animated 3D Piano published at the 'play' market has multiple vulnerabilities...

Mountain Goat Mountain - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mountain Goat Mountain published at the 'play' market has multiple vulnerabilities...

Crazy Goat FREE - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Crazy Goat FREE published at the 'play' market has multiple vulnerabilities...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

CVE-2014-6778

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6778

The Goat Forum aka com.gcspublishing.goatspot application 3.9.15 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6778

The CVE-2014-6778 entry concerns The Goat Forum (com.gcspublishing.goatspot) Android app, version 3.9.15, which does not verify X.509 certificates from SSL servers. This lack of certificate validation permits man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a craf...

Unfixed XSS vulnerability at www.alaminosgoatfarm.com

Security researcher Milisx, has submitted on 14/07/2009 a cross-site-scripting XSS vulnerability affecting www.alaminosgoatfarm.com, which at the time of submission ranked 7591055 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It i...

CVE-2009-1454

CVE-2009-1454 is an XSS in WebCollab’s tasks.php prior to version 2.50 (aka Billy Goat). The issue allows remote attackers to inject arbitrary script/HTML via the selection parameter in a todo action. Affected: WebCollab before 2.50. Impact (per available data): client-side script execution with ...