CVE-2018-5258

The CVE-2018-5258 entry concerns the Neon app for iOS (version 1.6.14) and describes a failure to verify X.509 certificates from SSL servers. The underlying issue is insecure certificate handling in the app, which enables remote attackers to spoof legitimate SSL servers and potentially obtain sen...

Neon app for iOS certificate validation vulnerability

Neon app for iOS is an iOS-based money management application authorized by Banco do Brasil. A certificate validation vulnerability exists in version 1.6.14 of the Neon app for iOS, which stems from the program's failure to detect X.509 certificates in the SSL server. A remote attacker can exploi...

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

Remote code execution

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

SMS Messages Neon Led Green - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SMS Messages Neon Led Green published at the 'play' market has multiple vulnerabilities...

Neon Motocross - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Neon Motocross published at the 'play' market has multiple vulnerabilities...

Neon Shadow - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Neon Shadow published at the 'play' market has multiple vulnerabilities...

Neon Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Neon Live Wallpaper published at the 'play' market has multiple vulnerabilities...

Neon Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Neon Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Emoji Smart Neon keyboard - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Emoji Smart Neon keyboard published at the 'play' market has multiple vulnerabilities...

Green Neon Keyboard Themes - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Green Neon Keyboard Themes published at the 'play' market has multiple vulnerabilities...

Neon Blue Keyboard Changer - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Neon Blue Keyboard Changer published at the 'play' market has multiple vulnerabilities...

TouchPal Neon Pink Theme - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application TouchPal Neon Pink Theme published at the 'play' market has multiple vulnerabilities...

Neon Fish Live Wallpaper - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Neon Fish Live Wallpaper published at the 'play' market has multiple vulnerabilities...

BN Pro Roboto-b Neon HD Text - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application BN Pro Roboto-b Neon HD Text published at the 'play' market has multiple vulnerabilities...

BN Pro ArialXL-b Neon HD Text - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application BN Pro ArialXL-b Neon HD Text published at the 'play' market has multiple vulnerabilities...

Vitamio Plugin ARMv7+NEON - Exported ContentProvider, Exported components, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Vitamio Plugin ARMv7+NEON published at the 'play' market has multiple vulnerabilities...

CVE-2007-0157

Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...