Google Android framework elevation of privilege vulnerability (CNVD-2017-21538)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Google Android MediaTek Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the MediaTek networking driver is a MediaTek-developed networking driver used in it. The MediaTek networking driver in Android is vulnerable to a power lifting vulnerability...

Google Android framework elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Plants vs. Zombies™ Heroes - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Plants vs. Zombies™ Heroes published at the 'play' market has multiple vulnerabilities...

PPEE (Puppy) - Professional PE file Explorer for reversers and malware researchers

There are lots of tools out there for statically analyzing malicious binaries, but they are ordinary tools for ordinary files. Puppy is a lightweight yet strong tool for static investigation of suspicious files. A companion plugin is also provided to query the file in the well-known malware...

MEGA - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MEGA published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 25 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc25

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Telegram - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Telegram published at the 'play' market has multiple vulnerabilities...

pay.taipei - Certificates or keys found, Exported components, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application pay.taipei published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 26 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc26

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Native DNS Spoofer (Example)

This module provides a Rex based DNS service to resolve queries intercepted via the capture mixin. Configure STATICENTRIES to contain host-name mappings desired for spoofing using a hostsfile or space/semicolon separated entries. In the default configuration, the service operates as a normal nati...

sharkPy - NSA Tool to Dissect, Analyze, and Interact with Network Packet Data using Wireshark and libpcap capabilities

A python module to dissect, analyze, and interact with network packet data as native Python objects using Wireshark and libpcap capabilities. sharkPy dissect modules extend and otherwise modify Wireshark's tshark. SharkPy packet injection and pcap file writing modules wrap useful libpcap...

MechBox - Open The Door Puzzle - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MechBox - Open The Door Puzzle published at the 'play' market has multiple vulnerabilities...

SuperTV OTT - BSD license, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SuperTV OTT published at the 'play' market has multiple vulnerabilities...

Metadata Analysis Draws its Own Conclusions on WannaCry Authors

The most intriguing mystery that remains about WannaCry is the identity of the attacker. The theory with the best legs is that North Korea’s Lazarus APT is the entity behind the worldwide ransomware outbreak given the discovery of shared code samples in the malware with older Lazarus attacks. Tha...

Clash Royale - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Clash Royale published at the 'play' market has multiple vulnerabilities...

DisplayLink Presenter - Native code usage, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application DisplayLink Presenter published at the 'play' market has multiple vulnerabilities...

Opera browser - latest news - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Opera browser - latest news published at the 'play' market has multiple vulnerabilities...

Android NVIDIA Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which NVIDIA Sound driver is a sound driver. An elevation of privilege vulnerability exists in the NVIDIA Sound driver in Android. An attacker can exploit this vulnerability to...

[SECURITY] Fedora 24 Update: oniguruma-5.9.6-4.fc24

Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...