CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

Adobe Illustrator Draw - External URLs, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Adobe Illustrator Draw published at the 'play' market has multiple vulnerabilities...

id Tech 3 -- remote code execution vulnerability

The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers downloading of further content and loading and executing it as native code with user credentials. This affects ioquake3, ioUrbanTerror, OpenArena, the original Quake 3 Arena and other forks...

國泰世華銀行 My MobiBank - Certificates or keys found, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application 國泰世華銀行 My MobiBank published at the 'play' market has multiple vulnerabilities...

Audi Logistik Challenge - Customized SSL, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Audi Logistik Challenge published at the 'play' market has multiple vulnerabilities...

Instant Followers Pro+ - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Followers Pro+ published at the 'play' market has multiple vulnerabilities...

Chrome: bypass for download filetype blacklist, extension->native privesc

This bug report describes a vulnerability that can be used by an extension with some permissions to escalate to native code execution on Linux desktops if Java is installed. No user interaction is required. Chrome permits extensions with appropriate permissions "downloads" and "downloads. open" t...

Pokémon Duel - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pokémon Duel published at the 'play' market has multiple vulnerabilities...

Messaging Lite G - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Lite G published at the 'play' market has multiple vulnerabilities...

SMS and MMS Diary - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SMS and MMS Diary published at the 'play' market has multiple vulnerabilities...

MMS - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MMS published at the 'play' market has multiple vulnerabilities...

Sword Of Xolan - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Sword Of Xolan published at the 'play' market has multiple vulnerabilities...

Dragon Blaze - Certificates or keys found, MIT license, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Dragon Blaze published at the 'play' market has multiple vulnerabilities...

Download Manager IDM - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager IDM published at the 'play' market has multiple vulnerabilities...

EBookDroid - PDF & DJVU Reader - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application EBookDroid - PDF & DJVU Reader published at the 'play' market has multiple vulnerabilities...

Shopify POS — Point of Sale - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Shopify POS — Point of Sale published at the 'play' market has multiple vulnerabilities...

UZCARD - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application UZCARD published at the 'play' market has multiple vulnerabilities...

Mobile Cash - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Cash published at the 'play' market has multiple vulnerabilities...

Ford Prosys - External URLs, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Ford Prosys published at the 'play' market has multiple vulnerabilities...

iRECA: Курьер beta (Unreleased) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application iRECA: Курьер beta Unreleased published at the 'play' market has multiple vulnerabilities...