CVE-2016-1580

The CVE-2016-1580 issue affects the ubuntu-core-launcher when running on Ubuntu classic systems. The setup_snappy_os_mounts function improperly determines the mount point of bind mounts used by snaps, enabling a remote attacker to obtain sensitive information or gain privileges via a snap whose n...

CVE-2016-1580: Undefined Security Weakness

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

Ubuntu 16.04 LTS : ubuntu-core-launcher vulnerability (USN-2956-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2956-1 advisory. Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind moun...

USN-2956-1: ubuntu-core-launcher vulnerability

Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when using snaps on Ubuntu classic systems eg, traditional desktop and server. If a user were tricked into installing a malicious sn...

USN-2956-1 ubuntu-core-launcher vulnerability

Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when using snaps on Ubuntu classic systems eg, traditional desktop and server. If a user were tricked into installing a malicious sn...

UBUNTU-CVE-2016-1580

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

CVE-2016-1580

The setupsnappyosmounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."...

PT-2016-4871

Name of the Vulnerable Software and Affected Versions ubuntu-core-launcher versions prior to 1.0.27.1 Description The issue is related to the setup snappy os mounts function, which improperly determines the mount point of bind mounts when using snaps. This could potentially allow remote attackers...

Android Privilege Escalation

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application that utilizes the connlauncher interface...

Next Launcher 3D Shell Lite - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Next Launcher 3D Shell Lite published at the 'play' market has multiple vulnerabilities...

GO Launcher-Theme,Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application GO Launcher-Theme,Wallpaper published at the 'play' market has multiple vulnerabilities...

Hola Launcher - Simple, Fast - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Hola Launcher - Simple, Fast published at the 'play' market has multiple vulnerabilities...

Car Launcher TRIAL - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Car Launcher TRIAL published at the 'play' market has multiple vulnerabilities...

Blaze Launcher - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blaze Launcher published at the 'play' market has multiple vulnerabilities...

CM Swipe (Lite Launcher) - Base64 encoded String, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CM Swipe Lite Launcher published at the 'play' market has multiple vulnerabilities...

Featured Launcher - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Featured Launcher published at the 'play' market has multiple vulnerabilities...

Arrow Launcher - Customized SSL, Exported ContentProvider, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Arrow Launcher published at the 'play' market has multiple vulnerabilities...

DU Launcher - Boost Your Phone - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application DU Launcher - Boost Your Phone published at the 'play' market has multiple vulnerabilities...

L Launcher -Marshmallow Launch - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application L Launcher -Marshmallow Launch published at the 'play' market has multiple vulnerabilities...

Lollipop Launcher - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Lollipop Launcher published at the 'play' market has multiple vulnerabilities...