Snapchat - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Snapchat published at the 'play' market has multiple vulnerabilities...

Corebox - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Corebox published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID29632: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54340 First Published: 2017 July 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29632 may contain the following files: Name | Size...

MEGA - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MEGA published at the 'play' market has multiple vulnerabilities...

Airbnb - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Airbnb published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

CVE-2017-8443

In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be...

Экспресс-баланс - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Экспресс-баланс published at the 'play' market has multiple vulnerabilities...

Google TalkBack - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Google TalkBack published at the 'play' market has multiple vulnerabilities...

Telegram - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Telegram published at the 'play' market has multiple vulnerabilities...

Спасибо от Сбербанка - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Спасибо от Сбербанка published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID29610: Email Messages Distributing Malicious Software on June 27, 2017

Medium Alert ID: 54320 First Published: 2017 June 27 18:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29610 may contain the following files: Name | Siz...

Mixmax: SSRF via webhook

Hi, There exists an SSRF vulnerability with the account webhook feature, allowing an attacker to verify the existence of the EC2 metadata url and enumerate URL's. POC: 1. Create a webhook at https://app.mixmax.com/dashboard/settings/rules with url http://169.254.169.254/latest/meta-data/. 2...

The vulnerability of the Qualcomm GPU operating system for Linux, allowing a hacker to execute arbitrary code

The vulnerability of the Common Internet Filesystem microprogramming system in Cisco Adaptive Security Appliances arises from insufficient validation of input data and the execution of operations outside the buffer in dynamic memory. Exploiting this vulnerability allows a malicious actor to perfo...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager SQL Injection Vulnerabilities

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM are both products of the U.S. Cisco Cisco.PI is a set of solutions for wireless management through Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technologies; EPNM is a network...

اضافات بلاك بيري - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application اضافات بلاك بيري published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID29568: Email Messages Distributing Malicious Software on June 21, 2017

Medium Alert ID: 54269 First Published: 2017 June 21 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29568 may contain the following files: Name | Siz...

Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerability

A vulnerability in the Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries. The vulnerability is due to a...

MyIrancell - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application MyIrancell published at the 'play' market has multiple vulnerabilities...

MasterCard Nearby - Certificates or keys found, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard Nearby published at the 'play' market has multiple vulnerabilities...