Thug life photo sticker maker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Thug life photo sticker maker published at the 'play' market has multiple vulnerabilities...

Mail.ru: e.mail.ru stored XSS in agent via sticker (smile)

Привет : смотрим скриншот : XSS в сообщениях агента с помощью стикера смайла. Отправка меседжа со стикером и XSS выглядит так: POST https://jim45.mail.ru/message?session=48280&r=18426&sdc=1 HTTP/1.1 Accept: / Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest Referer...

Viber for Android exposes insecure Javascript interface

------------------------------------------------------------------------ Viber for Android exposes insecure Javascript interface ------------------------------------------------------------------------ Yorick Koster, April 2014...

CVE-2014-7037

The Noble Sticker "FREE" aka com.kuronecostudio.kizokustamp.free application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7037

The CVE-2014-7037 entry concerns the Android app “Noble Sticker FREE” (com.kuronecostudio.kizokustamp.free), version 1.0.7, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive info...

CVE-2014-7037: Undefined Security Weakness

The Noble Sticker "FREE" aka com.kuronecostudio.kizokustamp.free application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Facebook Profile Sticker - SQL Injection Vulnerability

Document Title: =============== Facebook Profile Sticker - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=409 Release Date: ============= 2012-02-02 Vulnerability Laboratory ID VL-ID: ==================================== 409...

2Capsule SQL Injection

--==+================================================================================+==-- --==+ 2Capsule Sticker Remote SQL Injection Vulnerability +==-- --==+================================================================================+==--...

2Capsule - SQL Injection

2Capsule - SQL Injection --==+================================================================================+==-- --==+ 2Capsule Sticker Remote SQL Injection Vulnerability +==-- --==+================================================================================+==--...

2Capsule - SQL Injection

--==+================================================================================+==-- --==+ 2Capsule Sticker Remote SQL Injection Vulnerability +==-- --==+================================================================================+==--...

CVE-2004-2535

The CVE refers to Sticker prior to version 3.1.0 beta 2, where the person‑to‑person secure messaging feature is vulnerable. The underlying issue allows remote attackers to post messages to unauthorized private groups by abusing the group’s public encryption key, resulting in partial impact to int...

CVE-2004-2535

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key...

CVE-2004-2535: Undefined Security Weakness

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key...

CVE-2004-2535

The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key...