952 matches found
CVE-2015-7732
The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...
Mobile Security & Antivirus - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...
Decade Long Partnership = Global Partner Innovation Award
Here at Trend Micro we highly value the relationships we’ve build with our partners, especially those that have spanned several years. However, it’s particularly gratifying when those partners choose to recognize our work with an award. So, excuse us while we toot our own horn’s for a bit...
Radio Javan app for iOS authentication vulnerability
Radio Javan app for iOS is an iOS-based audio playback application from Radio Javan. An authentication vulnerability exists in versions 9.3.4 through 9.6.1 of the Radio Javan app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. An...
Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability
Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...
CVE-2017-8060
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...
CVE-2017-8060
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...
Code injection
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...
CVE-2017-8060
The CVE describes a flaw in Panda Mobile Security for iOS 1.1 where the app accepts invalid/self-signed TLS certificates, enabling a man-in-the-middle to silently intercept data during the login API call. The connected CNVD/CNVD-related entries corroborate the same vulnerable behavior, focusing o...
CVE-2017-8060
Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...
Google Android Qualcomm has an unspecified vulnerability (CNVD-2017-06759)
Android is a cell phone operating system based on the Linux open kernel. Google Android Qualcomm has a security vulnerability that allows attackers to perform security attacks...
Mobile Security Framework: MobSF
Mobile Security Framework is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We’ve been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test and...
Zimperium Publishes Exploits for Patched Android Bugs
Exploits for two patched Android privilege escalation vulnerabilities were published today by security company Zimperium. These are the first publicly released submissions from its N-Days Exploit Acquisition Program, which began in February and had among its stated goals to encourage researchers ...
Apple iOS webkit address bar forgery vulnerability
Apple iOS is an operating system for Apple smart devices. A spoofing vulnerability exists in the address bar of the Webkit user interface used by Apple iOS, which allows an attacker to construct malicious links and trick users into clicking on them, which can spoof the address bar...
Mobile Security & Antivirus - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...
Trend Micro Enterprise Mobile Security Android Application Man-in-the-Middle Attack Vulnerability
Trend Micro Enterprise Mobile Security Android Application is a mobile security suite. Versions of Trend Micro Enterprise Mobile Security Android Application prior to 9.7.1193 lack SSL certificate validation, which could allow an attacker to perform a man-in-the-middle attack and present a forged...
Verizon Rebuts Critics of Data-Collecting App
Verizon broke its silence today on what many believed would be a controversial rollout of an app made by Evie Labs called AppFlash, that had been identified by privacy advocates as spyware. The wireless carrier and broadband ISP defended itself Friday saying its critics were flat-out wrong. Veriz...
Design/Logic Flaw
There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...