EcoFleetFMS - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EcoFleetFMS published at the 'play' market has multiple vulnerabilities...

U.S. Dept Of Defense: Server Side Request Forgery (SSRF) vulnerability in a DoD website

A Department of Defense webserver was vulnerable to an SSRF attack that could have enabled a remote user to send custom web requests from the vulnerable system. @korprit was able to demonstrate this vulnerability by crafting specially formatted URLs. Thanks @korprit!...

Threat Outbreak Alert RuleID26789: Email Messages Distributing Malicious Software on December 8, 2016

Medium Alert ID: 51032 First Published: 2016 December 8 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26789 may contain the following files: Name |...

Threat Outbreak Alert RuleID26756: Email Messages Distributing Malicious Software on December 8, 2016

Medium Alert ID: 51028 First Published: 2016 December 8 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26756 may contain the following files: Name |...

Geoedge Global Proxy App - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Geoedge Global Proxy App published at the 'play' market has multiple vulnerabilities...

chromium-browser: limited xss in blink

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

[root] Pry-Fi - External URLs, Possible privilege escalation, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application root Pry-Fi published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID26751: Email Messages Distributing Malicious Software on December 6, 2016

Medium Alert ID: 50992 First Published: 2016 December 6 16:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26751 may contain the following files: Name |...

MAN Mobile24 - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MAN Mobile24 published at the 'play' market has multiple vulnerabilities...

CVE-2016-5212

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...

CVE-2016-5222

Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

UBUNTU-CVE-2016-5222

Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

B2B-Center — Мои торги - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application B2B-Center — Мои торги published at the 'play' market has multiple vulnerabilities...

S3cr3tapk<sVg/oNloAd=alert()> - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application S3cr3tapk published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID26634: Email Messages Distributing Malicious Software on December 1, 2016

Medium Alert ID: 49920 First Published: 2016 December 1 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26634 may contain the following files: Name |...

Threat Outbreak Alert RuleID26607: Email Messages Distributing Malicious Software on December 1, 2016

Medium Alert ID: 49918 First Published: 2016 December 1 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26607 may contain the following files: Name |...

Downloads Resources over HTTP

Overview Affected versions of closure-util insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution...

R4S Gateway - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application R4S Gateway published at the 'play' market has multiple vulnerabilities...

The University of Georgia - External URLs, SD-card access, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application The University of Georgia published at the 'play' market has multiple vulnerabilities...

V3 CONNECT - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application V3 CONNECT published at the 'play' market has multiple vulnerabilities...