Nike+ Panel & Mobile App - Multiple Web Vulnerabilities

Title: ====== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=663 VL-ID: ===== 663 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= Da...

Hulu for iOS Mobile Application Detection

Binary data 6553.prm...

Nike+ Panel / Mobile App Cross Site Scripting

Title: ====== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=663 VL-ID: ===== 663 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= Da...

Pandora Mobile Application Detection

Binary data 6540.prm...

Malicious Olympic 2012 Android Apps & Domains

Whenever an important event takes place, new opportunities for cyber criminals, especially for those who develop attacks based on social engineering, arise. Currently, the whole world has its eyes glued to TV screens watching the London 2012 Olympic Games. Anti-malware and anti-virus solutions...

Nike+ Panel & Mobile App - Multiple Web Vulnerabilities

Document Title: =============== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=663 Release Date: ============= 2012-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 663...

Mobile App Leaves Blackboard Courseware Open To Remote attack

Vulnerability Lab researchers discovered remotely exploitable cross site scripting vulnerabilities in Blackboard Mobile Learn v9. The education platform’s mobile application is reportedly vulnerable to a number of persistent input validation vulnerabilities that could give remote attackers the...

RiskRanker : A New malware detection technique

RiskRanker : A New malware detection technique For many years, mobile security experts have been fighting an uphill battle against malware, which has been steadily and dramatically increasing in both volume and sophistication. Well, NQ Mobile's Mobile Security Research Center, in collaboration wi...

New Wickr App Enables Secure, Self-Destructing Text Messages

Text messages are great, but they have the annoying property of being out of the sender’s control as soon as they’re sent. That’s resulted in all kinds of fun for the Internet, and it’s also presented a big opportunity for a security company to pick up the slack and impose some sanity and privacy...

Face.com Fixes Flaw to Prevent Facebook and Twitter Hijacks

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked. KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’...

Facebook Issues Security Updates for Mobile App

The Facebook security team is adding some new security features to the social network’s mobile applications, including upgrades to the login mechanism and account recovery options. The first addition is an update to Facebook’s existing login approval mechanism, which they are calling ‘code...

AdiOS Finds iOS Apps Capable of Dumping Users' Contacts

It’s gotten to the point now where it’s almost easier to talk about the mobile apps and services that don’t ship your personal data off to some remote server for purposes unknown rather than discussing the ones that do. The latest discussion of privacy invading apps flowed from the discovery that...

Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...

Google Enables Gmail Two-Factor Security in 150 Countries

Nearly six months after first introducing two-step verification for its Gmail service, Google has expanded the security feature to users outside the English-speaking world, opening it up to people in more than 150 countries. The company said on Thursday that it has enabled the two-step verificati...

DroidDream Attack Underscores Weaknesses of App Stores

The Android Market incident that surfaced Wednesday in which Google was forced to pull more than 20 apps that had been Trojaned is the latest piece of evidence that the mobile app store model is broken and is setting users up for failure. The details of the Android Market episode should be famili...

Google Adds Two-Factor Verification to Gmail

Google has introduced a new two-step authentication feature for Gmail users that it says will significantly increase the security of the free mail service. The system enables users to set up a method for obtaining a secret code that will be required, along with a password, to access a Gmail...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure

Vulnerability in HTC Peep: Twitter Credentials Disclosure http://blog.taddong.com/2011/02/vulnerability-in-htc-peep-twitter.html Title: Twitter credentials disclosure in HTC Peep mobile app default HTC Twitter client Vulnerability ID: TAD-2011-001 Credits: This vulnerability was discovered by...

CVE-2010-4214

CVE-2010-4214 affects the Wells Fargo Mobile app for Android (version 1.1). The vulnerability is that the application stores a user’s username, password, and account balances in cleartext, which could allow physically proximate attackers to read sensitive data from the app’s data stores. The prov...