Новости блогосферы t30p.ru - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Новости блогосферы t30p.ru published at the 'play' market has multiple vulnerabilities...

Concrete CMS: Content Spoofing possible in concrete5.org

An attacker can include any arbitrary text using specially crafted concrete5 url. This is done using character /%0d%0a. Input https://www.concrete5.org/%0d%0ahas%20moved%20to%20www.evil.com.Please%20visit%20evil.com%20Present%20resource Output The requested URL / has moved to www.evil.com.Please...

BRITNEY SPEARS: AMERICAN DREAM - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application BRITNEY SPEARS: AMERICAN DREAM published at the 'play' market has multiple vulnerabilities...

Dailyworkout - Free - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Dailyworkout - Free published at the 'play' market has multiple vulnerabilities...

Threat Scan - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Threat Scan published at the 'play' market has multiple vulnerabilities...

QR Scanner: Free Code Reader - Certificates or keys found, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application QR Scanner: Free Code Reader published at the 'play' market has multiple vulnerabilities...

TYPO3 Speaking URLs for TYPO3 Denial of Service Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. A denial of service vulnerability exists in TYPO3 Speaking URLs for TYPO3, which allows attackers to exploit the vulnerability to cause a denial of service...

CVE-2016-5163

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right LTR rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left RTL Unicode text, related to...

CVE-2016-5163

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right LTR rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left RTL Unicode text, related to...

UP® – Smart Coach for Health - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application UP® – Smart Coach for Health published at the 'play' market has multiple vulnerabilities...

Root all devices - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Root all devices published at the 'play' market has multiple vulnerabilities...

Finmax - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Finmax published at the 'play' market has multiple vulnerabilities...

ProxyDroid - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ProxyDroid published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID24810: Email Messages Distributing Malicious Software on September 4, 2016

Medium Alert ID: 48771 First Published: 2016 September 6 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24810 may contain the following files: Name |...

Threat Outbreak Alert RuleID24845: Email Messages Distributing Malicious Software on September 8, 2016

Medium Alert ID: 48777 First Published: 2016 September 6 14:02 GMT Last Updated: 2016 September 8 19:39 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2484...

FreeEmployee - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application FreeEmployee published at the 'play' market has multiple vulnerabilities...

Университет ИТМО - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Университет ИТМО published at the 'play' market has multiple vulnerabilities...

HelloSign - Dynamic Code Loading, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application HelloSign published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID24769: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 48699 First Published: 2016 September 1 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24769 may contain the following files: Name |...

webkit2gtk: multiple issues

CVE-2016-4590 same-origin policy bypass xisigr of Tencents Xuanwu Lab discovered a vulnerability in the way webkit handles URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. - CVE-2016-4591 arbitrary filesystem access ma.la of LINE Corporation discoveered...