Android KeyStore Encryption Scheme Broken, Researchers Say

The default implementation for KeyStore, the system in Android designed to store user credentials and cryptographic keys, is broken, researchers say. In a an academic paper published this week, researchers argue that the particular encryption scheme that KeyStore uses fails to protect the integri...

Bitxfy - Exported components, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Bitxfy published at the 'play' market has multiple vulnerabilities...

Sense от Альфа-Банка - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Sense от Альфа-Банка published at the 'play' market has multiple vulnerabilities...

Bill.com - Apache license, BSD license, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Bill.com published at the 'play' market has multiple vulnerabilities...

CVE-2015-7462

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program...

Design/Logic Flaw

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program...

CVE-2015-7462

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program...

CVE-2015-7462

IBM WebSphere MQ for IBM i 8.0.0.4 is affected. An administrator can run mqcertck from MQ trace output to reveal cleartext certificate-keystore passwords, exploiting local access to decrypt other MQ administrator passwords. The issue stems from the mqcertck tool introduced in MQ 8.0.0.4, enabling...

Mishka - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Mishka published at the 'play' market has multiple vulnerabilities...

SignagePlayer Android (FREE) - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application SignagePlayer Android FREE published at the 'play' market has multiple vulnerabilities...

Car costs accounting - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Car costs accounting published at the 'play' market has multiple vulnerabilities...

ERR - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application ERR published at the 'play' market has multiple vulnerabilities...

彰銀淘金王 - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application 彰銀淘金王 published at the 'play' market has multiple vulnerabilities...

PARGI.EE - Certificates or keys found, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application PARGI.EE published at the 'play' market has multiple vulnerabilities...

ABC Learning letters toddlers - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ABC Learning letters toddlers published at the 'play' market has multiple vulnerabilities...

Acorns - Invest Spare Change - Base64 encoded String, Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Acorns - Invest Spare Change published at the 'play' market has multiple vulnerabilities...

Signature - External URLs, KeyStore usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Signature published at the 'play' market has multiple vulnerabilities...

Money transfers - External URLs, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Money transfers published at the 'play' market has multiple vulnerabilities...

From 0 to TrustZone in the second article: the QSEE mention the right vulnerability and the use of CVE-2 0 1 5-6 6 3 9-a vulnerability warning-the black bar safety net

! In this article, we discuss how to find and exploit a vulnerability, access to Qualcomm secure execution environmentQSEEof the code execute permissions. Related reading From 0 to TrustZone first article: explore the high-pass SEE safe executable environment QSEE attack surface In a previous...

Amazon Kindle - Exported ContentProvider, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Amazon Kindle published at the 'play' market has multiple vulnerabilities...