13608 matches found
Starbucks: Possible subdomain takeover at openapi.starbucks.com
@benoculars was able to take advantage of a process flaw to use some of the space provided for openapi.starbucks.com. While we were still securely serving content from this domain and it did not impact users or operations, it would have been possible for @benoculars to serve content from unique...
Elasticsearch Kibana Cross-Site Request Forgery Vulnerability (CNVD-2017-15522)
Elasticsearch Kibana is a suite of open source, browser-based tools for analyzing and searching Elasticsearch dashboards. A cross-site request forgery vulnerability exists in Elasticsearch Kibana that allows remote attackers to construct malicious URIs, trick users into parsing them, and can targ...
SMM Reseller Panel Indonesia - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application SMM Reseller Panel Indonesia published at the 'play' market has multiple vulnerabilities...
Lost Android - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Lost Android published at the 'play' market has multiple vulnerabilities...
ВьетКафе - Corrupted files, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application ВьетКафе published at the 'play' market has multiple vulnerabilities...
MechBox - Open The Door Puzzle - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application MechBox - Open The Door Puzzle published at the 'play' market has multiple vulnerabilities...
SuperTV OTT - BSD license, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application SuperTV OTT published at the 'play' market has multiple vulnerabilities...
Threat Outbreak Alert RuleID29487: Email Messages Distributing Malicious Software on June 14, 2017
Medium Alert ID: 54201 First Published: 2017 June 14 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29487 may contain the following files: Name | Siz...
Cisco Spark - Certificates or keys found, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Cisco Spark published at the 'play' market has multiple vulnerabilities...
Clash Royale - External URLs, Native code usage, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Clash Royale published at the 'play' market has multiple vulnerabilities...
Threat Outbreak Alert RuleID29471: Email Messages Distributing Malicious Software on June 13, 2017
Medium Alert ID: 54184 First Published: 2017 June 13 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29471 may contain the following files: Name | Siz...
Opera browser - latest news - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Opera browser - latest news published at the 'play' market has multiple vulnerabilities...
Google Releases reCAPTCHA API for Android
Google announced today that it has made a new reCAPTCHA API available for Android. The API is part of Google Play Services, Google said, and developers can now add the verification to mobile applications to distinguish between bots and human users. The technology is more than a decade old and...
NOVA IPTV PLAYER+ - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application NOVA IPTV PLAYER+ published at the 'play' market has multiple vulnerabilities...
Roche Events - Corrupted files, Dangerous filesystem permissions, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Roche Events published at the 'play' market has multiple vulnerabilities...
Reddit: Top Trending Content - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Reddit: Top Trending Content published at the 'play' market has multiple vulnerabilities...
Personal Banking - Customized SSL, External URLs, KeyStore usage vulnerabilities
HackApp vulnerability scanner discovered that application Personal Banking published at the 'play' market has multiple vulnerabilities...
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
