MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

Coinbase: OAUTH pemission set as true= lead to authorize malicious application

OAuth authorize button in the Coinbase Android App did not have the android:filterTouchesWhenObscured attribute set to true, which may have made it vulnerable to tap-jacking. Reported UI Redressing Clickjacking For Mobile application of Coinbase , attack scenario is same as...

CVE-2015-5717

The Siemens COMPAS Mobile application before 1.6 for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Photo Transfer (2) 1.0 iOS - Denial of Service

Photo Transfer 2 1.0 iOS - Denial of Service Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ...

How To Use WhatsApp Web Client on iPhone and Other iOS Devices

WhatsApp Web client support is now available for iOS users. That's right, now iOS users can access their instant messaging facility on the web; without taking the other route via jailbreaking. Eight months ago, on January 21, 2015, WhatsApp was made available on web browsers, and let Android,...

Device Inspector 1.5 Command Injection

Document Title: =============== Device Inspector v1.5 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1558 Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID: ====================================...

Nest Labs Mobile Application Detection (deprecated)

Binary data 8838.prm...

WK UDID 1.0.1 Command Injection

Document Title: =============== WK UDID v1.0.1 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1539 Release Date: ============= 2015-07-01 Vulnerability Laboratory ID VL-ID: ==================================== 1539...

FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability

Document Title: =============== FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1538 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 153...

FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability

Document Title: =============== FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1538 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID: ==================================== 153...

Microsoft OneDrive iOS Mobile Application Detection

Binary data 8788.prm...

Good for Enterprise Mobile Application Detection

Binary data 8795.prm...

Citrix GoToMyPC Mobile Application Detection

Binary data 8793.prm...

Kankun Smart Socket Device and Mobile Application Local Security Bypass Vulnerability

Kankun Smart Socket device is a wireless smart socket. mobile application is a mobile application for wireless smart socket. The Kankun Smart Socket device and mobile application use hard-coded AES 256-bit keys, which allow remote attackers to sniff the network, obtain sensitive information or...

Flickr Mobile Application Detection (deprecated)

Binary data 6970.prm...

Slacker Radio Mobile Application Detection

Binary data 8702.prm...

Snapchat Mobile Application Detection

Binary data 8017.prm...

Instagram Mobile Application Detection

Binary data 8776.prm...

Google Locks Down Excessive Android App Permissions

Excessive mobile application permissions have long been a security and privacy concern, in particular for Android users who download apps for the platform from a number of sources, and not just from Google. The most notorious case is likely Goldenshores Technologies LLC, which agreed to settle...

Eisbär SCADA (All Versions) - Persistent UI Vulnerability

Document Title: =============== Eisbär SCADA All Versions - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID: ==================================== 14...