CVE-2019-16681

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

EUVD-2019-7242

Malware in sbrugna...

CVE-2019-16681

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

CVE-2019-16681

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

Privilege escalation

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

CVE-2019-16681

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

CVE-2019-16681

CVE-2019-16681 affects the Traveloka Android app (version 3.14.0) where the component com.traveloka.android.activity.common.WebViewActivity exports functionality that can open arbitrary URLs and inject deceptive content into the UI. The issue can also allow opening local files when the device is ...

PT-2019-14765

Name of the Vulnerable Software and Affected Versions Traveloka application version 3.14.0 Description The issue allows for the opening of arbitrary URLs, potentially injecting deceptive content into the UI. When in physical possession of the device, it is also possible to open local files. The...

CVE-2019-16681: Improper Neutralization of Input During Web Page Generation

The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to the opening of arbitrary URLs, which can inject deceptive content into the UI. When in physical possession of the device, opening local files is also possible. NOTE: As of...

Traveloka Book Flight & Hotel - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Traveloka Book Flight & Hotel published at the 'play' market has multiple vulnerabilities...