865 matches found
CVE-2016-8291
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform...
CVE-2016-8291
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to Mobile Application Platform...
Бонус Плюс - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Бонус Плюс published at the 'play' market has multiple vulnerabilities...
Boozt Fashion AB: Host header poisoning leads to account password reset links hijacking
Hi, Issue Summary : While conducting my regular testing I discovered that the mobile version of boozt.com application relies on the host header when constructing password reset links emailed to the user. Thus, an attacker can inject a arbitrary host header which leads to password reset leakage...
MARA Framework - Mobile Application Reverse engineering and Analysis Framework
MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering tools, in order to make the task or reverse engineering and analysis easier and friendly to mobile application developers and security...
Kingdoms Mobile - Total Clash - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Kingdoms Mobile - Total Clash published at the 'play' market has multiple vulnerabilities...
Hack by BMW portal vulnerability to tampering BMW vehicle set-bug warning-the black bar safety net
BMW ConnectedDrive portal to the presence of the two vulnerabilities may allow an attacker to manipulate with the BMW infotainment system vehicle settings. ! ConnectedDrive is the BMW car infotainment system name. The system can be in-car use, or by a series connection of a mobile application to...
Instagram Patches Brute-Force Authentication Flaws
Facebook on Thursday patched a pair of vulnerabilities that enabled brute-force attacks against Instagram passwords, and also hardened its password policy. Researcher Arne Swinnen privately disclosed the flaws in December and in February respectively. One bug was patched in February, while the...
Hacker finds flaws that could let anyone steal $25 Billion from a Bank
A security researcher could have stolen as much as $25 Billion from one of the India's biggest banks ‒ Thanks to the bank's vulnerable mobile application. Late last year, security researcher Sathya Prakash discovered a number of critical vulnerabilities in the mobile banking application of an...
File Hub Input Validation Vulnerability
File Hub provides easy access to files on iOS Devices, Cloud Services and remote computers. An input validation vulnerability exists in File Hub. An attacker can inject malicious persistent code into the mobile application...
WK UDID v1.0.1 iOS - Command Inject Vulnerability
Document Title: =============== WK UDID v1.0.1 iOS - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1539 Release Date: ============= 2016-05-01 Vulnerability Laboratory ID VL-ID: ==================================== 1539...
CVE-2016-1185
The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application...
CVE-2016-1185
The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application...
CVE-2016-1185
CVE-2016-1185 affects Cybozu kintone mobile for Android (1.x prior to 1.0.6). Affected component is the Android client where an attacker can cause a crafted application to disclose an authentication token, constituting an authentication information management vulnerability. The public documents s...
CVE-2016-1185
The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application...
myapp.trendswebsolutions.com XSS vulnerability
Open Bug Bounty ID: OBB-147185 Description| Value ---|--- Affected Website:| myapp.trendswebsolutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Glassdoor Mobile Application Detection
Binary data 9229.prm...
Pinterest Mobile Application Detection
Binary data 9247.prm...