HTC Sense Home - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application HTC Sense Home published at the 'play' market has multiple vulnerabilities...

HTC Rhyme ANT Radio Connector - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application HTC Rhyme ANT Radio Connector published at the 'play' market has multiple vulnerabilities...

HTC Internet - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application HTC Internet published at the 'play' market has multiple vulnerabilities...

Stagefright Variant 'Metaphor' Puts Millions Of Samsung, LG and HTC Phones At Risk

Millions of Android users are at risk of a new Metaphor exploit that can take over Samsung, LG and HTC phones in under 20 seconds. The hack gives attackers access to the targeted phones including the ability to inject malware and take control over key smartphone functions. Discovered by...

New Exploit to 'Hack Android Phones Remotely' threatens Millions of Devices

Attention Android users! Millions of Android devices are vulnerable to hackers and intelligence agencies once again – Thanks to a newly disclosed Android Stagefright Exploit. Yes, Android Stagefright vulnerability is Back… …and this time, the Stagefright exploit allows an attacker to hack Android...

Google released Android Stagefright 2.0 vulnerability security patches-bug warning-the black bar safety net

! It was reported that Google fixes Android latest Stagefright 2.0 vulnerabilities, and by OTA to the Nexus devices to push the update. However, Samsung, LG, HTC, and other manufacturers of Android devices need a period of time in order to receive this vulnerability update. Stagefright series...

Google releases Security Patch for Android Stagefright 2.0 Vulnerability

Google reportedly fixed the latest round of Stagefright vulnerabilities in Android, pushing its latest over-the-air OTA update to Nexus devices. Last week, researchers warned of Stagefright 2.0 vulnerability that affected more than one Billion Android devices dating back to the latest versions of...

How to Install Android 6.0 Marshmallow and When will Your Smartphone Get it?

Google is eager to release the latest version of its mobile operating system, Android 6.0 Marshmallow, to some of its Smartphone and Tablet lineup. The latest Android 6.0 Marshmallow update brings a whole host of new features, including Doze mode, App permissions, Google Now on Tap, "Do not...

Google Pulls App Exploiting Certifi-Gate Vulnerability

A mobile application exploiting the so-called Certifi-gate vulnerability disclosed at Black Hat has been removed from the Google Play store. Though the number of downloads of Recordable Activator, a screen recorder app for Android devices, hovers between 100,000 and a half-million, researchers at...

Stagefright Patch Incomplete Leaving Android Devices Still Exposed

Google today released to open source a new patch for the infamous Stagefright vulnerability found in 950 million Android devices after researchers at Exodus Intelligence discovered the original patch was incomplete and Android devices remain exposed to attack. “We’ve already sent the fix to our...

Android Stagefright contains multiple vulnerabilities

Overview Stagefright is the media playback service for Android, introduced in Android 2.2 Froyo. Stagefright in versions of Android prior to 5.1.1r9 may contain multiple vulnerabilities, including several integer overflows, which may allow a remote attacker to execute code on the device...

HTC Mobile Device Model Detection

Binary data 6072.prm...

Use HTC One vulnerability to crack mobile PIN password-vulnerability warning-the black bar safety net

HTC One phone is running Android 4.2.2 and HBOOT 1.54.0000, it exists a file called Bootloader vulnerability. This vulnerability early in the 2 0 1 4 year 2 month's report to the HTC official, and at times months to fix the vulnerability. In get HTC official consent, we will now take the entire...

Android Browser Same Origin Policy Bypass Vulnerability

A SOP bypass occurs when a sitea.com is some how able to access the properties of siteb.com such as cookies, location, response etc. Due to the nature of the issue and potential impact, this is very rarely found in modern browsers. However, they are found once in a while. Vulnerability: Android...

Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities

No description provided by source. //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and...

Android 1.x/2.x HTC Wildfire - Local Root Exploit

No description provided by source. / android 1.x/2.x the real youdev feat. init local root exploit. Modifications to original exploit for HTC Wildfire Stage 1 soft-root c 2010 Martin Paul Eve Changes: -- Will not remount /system rw NAND protection renders this pointless -- Doesn't copy self, mere...

WeakSauce

WeakSauce is an exploit for some HTC devices. It was compatible with the HTC One m7 & m7 on Verizon...

DEBIAN-CVE-2013-4579

The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after...

HTCSyncManagerUpdate DLL Hijacking

Exploit Title: HTCSyncManagerUpdate quserex.dll & mfc71enu.dll & mfc71loc.dll Path Subversion Arbitrary DLL Injection Code Execution Author: IranianDarkCodersTeam Discovered by A.CH12 Software Link: http://www.htc.com/ Version: 2.1.46.0 Tested on: Windows 7 //...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...