Такси Восток. Приморье - Dangerous filesystem permissions, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Такси Восток. Приморье published at the 'play' market has multiple vulnerabilities...

Kube Jump - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Kube Jump published at the 'play' market has multiple vulnerabilities...

The vulnerability of the network virtualization tool for testing software from HP Network Virtualization allows a hacker to read arbitrary files.

The vulnerability of the network virtualization tool for testing software from HP Network Virtualization. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files using a specially crafted URL when accessing components like HttpServlet or...

The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary JavaScript code

The vulnerability of Firefox lies in the improper restriction of resource: URL. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code with privileges of a Chrome browser, thereby circumventing access control policies. This can be achieved, for example, by usi...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality and integrity of protected information.

The vulnerability exists in the API extension for Debugger in the browser/extensions/api/debugger/debuggerapi.cc module in Google Chrome, due to the lack of checking for the URL scheme of the tab before attaching. Exploiting this vulnerability allows malicious actors to circumvent access...

TVR Control - External URLs, Hardcoded secrets, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application TVR Control published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Firefox browser, which allows for cross-site scripting execution

The Mozilla Firefox browser contains a vulnerability related to errors in security policy settings ignoring the Content Security Policy for data: URL during session restoration. Exploiting this vulnerability allows malicious actors to execute cross-site scripts using a specially crafted document,...

The vulnerability of the Mozilla SeaMonkey software package, which allows for cross-site scripting execution

Mozilla SeaMonkey software contains a vulnerability related to errors in security policy settings ignoring Content Security Policy for data: URL during session restoration. Exploiting this vulnerability allows malicious actors to execute cross-site scripts using a specially crafted document, whic...

Paragon Initiative Enterprises: Stored XSS in comments

Comments can contain an author's website. This website is used in the href attribute of link elements and isn't filtered. Thus it allows URLs like javascript:alert1 to be used. These URLs must be filtered by protocol, e.g. only allow http and https. These attacks are blocked by the default CSP, b...

Bitxfy - Exported components, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Bitxfy published at the 'play' market has multiple vulnerabilities...

Starlink - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Starlink published at the 'play' market has multiple vulnerabilities...

Traveling Mailbox - Corrupted files, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Traveling Mailbox published at the 'play' market has multiple vulnerabilities...

Ambite - motivational ToDo - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Ambite - motivational ToDo published at the 'play' market has multiple vulnerabilities...

Playbook for Developers - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Playbook for Developers published at the 'play' market has multiple vulnerabilities...

Cisco Prime Collaboration Deployment SQL Injection Vulnerability

A vulnerability in the interface of the Cisco Prime Collaboration Deployment SQL database could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation for user-supplied input in...

FFC itApps - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application FFC itApps published at the 'play' market has multiple vulnerabilities...

MR Group - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MR Group published at the 'play' market has multiple vulnerabilities...

First Coat - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application First Coat published at the 'play' market has multiple vulnerabilities...

Mishka - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Mishka published at the 'play' market has multiple vulnerabilities...

H.I.S. PLAN！WEBで作ったプランを持ち歩けます。 - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application H.I.S. PLAN！WEBで作ったプランを持ち歩けます。 published at the 'play' market has multiple vulnerabilities...