Connexx Smart Connect - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Connexx Smart Connect published at the 'play' market has multiple vulnerabilities...

myHearing - Dangerous filesystem permissions, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application myHearing published at the 'play' market has multiple vulnerabilities...

binaxDemo - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application binaxDemo published at the 'play' market has multiple vulnerabilities...

Hanover - External URLs, Native code usage, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Hanover published at the 'play' market has multiple vulnerabilities...

Pokladnica - Certificates or keys found, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pokladnica published at the 'play' market has multiple vulnerabilities...

Database Activity Monitoring: A Do’s and Don’ts Checklist for DBAs

In a previous post, we looked at the limitations of native audit, the free tool often used by database administrators DBAs for logging database activity. While it has its appeal—it’s already part of the database server and does not require additional cost for third-party appliances or...

Android Qualcomm sound driver elevation of privilege vulnerability (CNVD-2017-06114)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Sound Driver is a sound driver developed by Qualcomm. The Qualcomm sound driver in Android on Pixel and Pixel XL devices is vulnerable to a power lifting vulnerability. An...

Native Auditing Tools – Performance, Cost, and Compliance Issues

As we covered in a previous post, data-centric security measures need to be implemented to meet compliance requirements and protect against complex, ever-evolving attacks. There are two primary approaches to implementing these measures: Native auditing, which uses a database server's built-in too...

STC Voice - Dangerous filesystem permissions, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application STC Voice published at the 'play' market has multiple vulnerabilities...

Zalo - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Zalo published at the 'play' market has multiple vulnerabilities...

eWeLink - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application eWeLink published at the 'play' market has multiple vulnerabilities...

Starkey Relax - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Starkey Relax published at the 'play' market has multiple vulnerabilities...

Post.kz transfers - External URLs, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Post.kz transfers published at the 'play' market has multiple vulnerabilities...

+TVGO - Certificates or keys found, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application +TVGO published at the 'play' market has multiple vulnerabilities...

Apple Safari - Array concat Memory Corruption Exploit

Exploit for multiple platform in category dos / poc !-- Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1095 There is an out-of-bounds memcpy in Array.concat that can lead to memory corruption. In builtins/ArrayPrototype.js, the function concatSlowPath calls a native method...

Chrome Universal XSS using an intercepted native function (CVE-2016-1672)

VULNERABILITY DETAILS The fix for the issue 546677 is insufficient to protect against overriding the internal extensions code -- it is still possible to take over the built-in extension system with a combination of getters and setters. This allows web content to gain access to native functions th...

Chrome Universal XSS via the interception of |Binding| with Object.prototype.create (CVE-2016-1674)

VULNERABILITY DETAILS The fix for the issue 590118 is insufficient to protect against the bindings interception. While they can't be accessed by triggering accessors on the |modules| object anymore, it's still possible to trap the set operation for |Binding. create| using the Object. prototype...

Real Followers Booster - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Real Followers Booster published at the 'play' market has multiple vulnerabilities...

Mozaic GO - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Mozaic GO published at the 'play' market has multiple vulnerabilities...

Google Android Qualcomm SPCom Driver Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm SPCom Driver is a serial communication driver component. A power lifting vulnerability exists in the Qualcomm SPCom Driver in Android 6.0.1 and earlier versions...