ReadyCLOUD - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application ReadyCLOUD published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID28119: Email Messages Distributing Malicious Software on March 3, 2017

Medium Alert ID: 52868 First Published: 2017 March 3 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28119 may contain the following files: Name | Siz...

Joomla! Component Coupon 3.5 - SQL Injection

Exploit Title: Joomla! Component Coupon v3.5 - SQL Injection Google Dork: inurl:index.php?option=comcoupon Date: 03.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/coupon/ Demo:...

Pandora Online - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pandora Online published at the 'play' market has multiple vulnerabilities...

Cydia Substrate - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Cydia Substrate published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2017-6410

kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL potentially including Basic Authentication credentials, a query string, or PATHINFO, which allows remote attackers to obtain sensitive information via a crafted PAC file...

Threat Outbreak Alert RuleID28090: Email Messages Distributing Malicious Software on March 1, 2017

Medium Alert ID: 52832 First Published: 2017 March 1 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28090 may contain the following files: Name | Siz...

QuadRooter Scanner - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application QuadRooter Scanner published at the 'play' market has multiple vulnerabilities...

Покупки по акциям - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Покупки по акциям published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID27992: Email Messages Distributing Malicious Software on February 23, 2017

Medium Alert ID: 52741 First Published: 2017 February 27 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27992 may contain the following files: Name |...

Audi Foren - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Audi Foren published at the 'play' market has multiple vulnerabilities...

THI-App - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application THI-App published at the 'play' market has multiple vulnerabilities...

QIB Aman - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application QIB Aman published at the 'play' market has multiple vulnerabilities...

FireFox RCE by chaining small bugs

The Main Bug The main bug that made this possible was a strange behavior where 'javascript:' URLs coming from bookmarks were turning into chrome windows after a refresh occurs. This gave me my first chance at potentially injecting arbitrary chrome code, achieving that would mean I have an RCE!...

The Last Door: Season 2 - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application The Last Door: Season 2 published at the 'play' market has multiple vulnerabilities...

Pushbullet - SMS on PC - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pushbullet - SMS on PC published at the 'play' market has multiple vulnerabilities...

Orman Genel Müdürlüğü - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Orman Genel Müdürlüğü published at the 'play' market has multiple vulnerabilities...

Selfloops - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Selfloops published at the 'play' market has multiple vulnerabilities...

CVE-2017-6059

A text injection flaw was found in how modauthopenidc handled error pages. An attacker could potentially use this flaw to conduct content spoofing and phishing attacks by tricking users into opening specially crafted URLs...

Pokémon Duel - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pokémon Duel published at the 'play' market has multiple vulnerabilities...