Sakh.biz - Corrupted files, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Sakh.biz published at the 'play' market has multiple vulnerabilities...

Taxi.Sakh.com - External URLs, Unsafe deleting, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Taxi.Sakh.com published at the 'play' market has multiple vulnerabilities...

CVE-2016-3174

An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since some checks were missing, arbitrary URLs could be provided as redirection target. Users can be tricked to follow a link to a trustworthy domain but end...

CVE-2016-9900

External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox 50.1, Firefox ESR 45.6, and Thunderbird 45.6...

Jorgo Taxi - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Jorgo Taxi published at the 'play' market has multiple vulnerabilities...

Propana Reload - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Propana Reload published at the 'play' market has multiple vulnerabilities...

KinerjaPay - External URLs, Native code usage, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application KinerjaPay published at the 'play' market has multiple vulnerabilities...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2016-9894: Buffer overflow in SkiaGL CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements CVE-2016-9895: CSP bypass using marquee tag CVE-2016-9896: Use-after-free with WebVR CVE-2016-9897: Memory corruption in libGLES CVE-2016-9898:...

Sompo Insurance TravelJoy - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Sompo Insurance TravelJoy published at the 'play' market has multiple vulnerabilities...

Renault Connected Car - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Renault Connected Car published at the 'play' market has multiple vulnerabilities...

Open Camera - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Open Camera published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID26826: Email Messages Distributing Malicious Software on December 9, 2016

Medium Alert ID: 51058 First Published: 2016 December 9 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26826 may contain the following files: Name |...

EcoFleetFMS - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EcoFleetFMS published at the 'play' market has multiple vulnerabilities...

U.S. Dept Of Defense: Server Side Request Forgery (SSRF) vulnerability in a DoD website

A Department of Defense webserver was vulnerable to an SSRF attack that could have enabled a remote user to send custom web requests from the vulnerable system. @korprit was able to demonstrate this vulnerability by crafting specially formatted URLs. Thanks @korprit!...

Threat Outbreak Alert RuleID26789: Email Messages Distributing Malicious Software on December 8, 2016

Medium Alert ID: 51032 First Published: 2016 December 8 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26789 may contain the following files: Name |...

Threat Outbreak Alert RuleID26756: Email Messages Distributing Malicious Software on December 8, 2016

Medium Alert ID: 51028 First Published: 2016 December 8 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26756 may contain the following files: Name |...

Geoedge Global Proxy App - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Geoedge Global Proxy App published at the 'play' market has multiple vulnerabilities...

chromium-browser: limited xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

[root] Pry-Fi - External URLs, Possible privilege escalation, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application root Pry-Fi published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID26751: Email Messages Distributing Malicious Software on December 6, 2016

Medium Alert ID: 50992 First Published: 2016 December 6 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26751 may contain the following files: Name |...