Romantic FM - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Romantic FM published at the 'play' market has multiple vulnerabilities...

Мастерская подарков - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Мастерская подарков published at the 'play' market has multiple vulnerabilities...

HostPilot - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application HostPilot published at the 'play' market has multiple vulnerabilities...

My.Services - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application My.Services published at the 'play' market has multiple vulnerabilities...

Partner Portal - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Partner Portal published at the 'play' market has multiple vulnerabilities...

Intermedia VeriKey - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Intermedia VeriKey published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the MediaTek misc-sd driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

dbaudio R1 2.14.4 Privilege Escalation

dbaudio R1 v2.14.4 DNS-SD Service Unquoted Service Path Privilege Escalation Vendor: d&b audiotechnik GmbH Product web page: http://www.dbaudio.com Affected version: R1 2.14.4 and DNS-SD 379.32.2 Summary: The R1 Remote control software succeeds the d&b ROPE C software. It is a software package...

dbaudio R1 v2.14.4 DNS-SD Service Unquoted Service Path Privilege Escalation

Summary The R1 Remote control software succeeds the d&b ROPE C software. It is a software package designed to operate d&b amplifiers D12, D6, E-PAC with Display remotely using the d&b Remote network based on CAN-Bus technology. Description The application suffers from an unquoted search path issu...

Android MediaTek misc-sd elevation of privilege vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the MediaTek misc-sd driver in versions of Android prior to 5.1.1 LMY49F, and 6.0 prior to 2016-01-01. A remote attacker can exploit the vulnerability to gain elevated...

CVE-2015-6637

The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013...

CVE-2015-6637

The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013...

CVE-2015-6637

The CVE-2015-6637 issue is an elevation of privilege in the MediaTek misc-sd kernel driver used by Android prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application could exploit the driver to execute code with kernel privileges. Public sources describe it as a local privilege esca...

VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net

! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...

ManageEngine ServiceDesk Plus 9.1 Build 9110 Path Traversal

Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use capability, ServiceDesk Plus helps IT support teams deliver world-class...

ManageEngine ServiceDesk Plus <= 9.1 build 9110 - Path Traversal Vulnerability

Exploit for jsp platform in category web applications Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use capability, ServiceDe...

ADH-Web Server IP-Cameras Multiple Improper Access Restrictions Vulnerabilities - Active Check

ADH-Web Server IP-Camera is prone to multiple access restrictions vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Unauthorized Access Vulnerability in Multiple Dedicated Micros DVR Products

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense and DS2 are hard disk recorders from Dedicated Micros UK. A security vulnerability exists in several Dedicated Micros products, allowing remote attackers to exploit the vulnerability for unauthorized access to the devices...

RaspBSD – FreeBSD distribution for Raspberry Pi

Raspberry Pi is gaining new heights by rapidly maturing as; after Microsoft made Windows 10 IoT core supporting the Raspberry Pi 2, now a new version FreeBSD operating system is also deployable on Raspberry Pi devices, called RaspBSD. FreeBSD Berkeley Software Distribution is an open source...

SQL injection vulnerability in the sd parameter in Ticketmaster ERP web-based ticketing system/Json_db/flight_zhekou.aspx?sd=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...