FBReader: Favorite Book Reader - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application FBReader: Favorite Book Reader published at the 'play' market has multiple vulnerabilities...

MyFreeZoo Mobile - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MyFreeZoo Mobile published at the 'play' market has multiple vulnerabilities...

Wearable Widgets - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Wearable Widgets published at the 'play' market has multiple vulnerabilities...

ADAC Auslandshelfer - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application ADAC Auslandshelfer published at the 'play' market has multiple vulnerabilities...

Debian DSA-3549-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1651 An out-of-bounds read issue was discovered in the pdfium library. - CVE-2016-1652 A cross-site scripting issue was discovered in extension bindings. - CVE-2016-1653 Choongwoo Han discovered an out-of-bounds...

DSA-3549-1 chromium-browser - security update

Bulletin has no description...

Waterfall Photo Frames - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Waterfall Photo Frames published at the 'play' market has multiple vulnerabilities...

e-search <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The e-search WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/e-search/tmpl/dateselect.php?date-from=""...

CVE-2015-0266

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs...

Design/Logic Flaw

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs...

CVE-2015-0266

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs...

Fake GPS Location - External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Fake GPS Location published at the 'play' market has multiple vulnerabilities...

Facebook Lite - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Facebook Lite published at the 'play' market has multiple vulnerabilities...

Juasapp - Prank Calls - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Juasapp - Prank Calls published at the 'play' market has multiple vulnerabilities...

SOL82679059 - BIG-IP APM SSO vulnerability CVE-2016-3686

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

MobiControl Stage Programmer - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MobiControl Stage Programmer published at the 'play' market has multiple vulnerabilities...

Georgian Quotes - ანდაზები - Dynamic Code Loading, External URLs, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application Georgian Quotes - ანდაზები published at the 'play' market has multiple vulnerabilities...

Debian DSA-3544-1 : python-django - security update

Several vulnerabilities were discovered in Django, a high-level Python web development framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2512 Mark Striemer discovered that some user-supplied redirect URLs containing basic authentication...

Gratipay: prevent %2f spoofed URLs in profile statement

https://gratipay.com%[email protected] on clicking on this url this link will take to the google.com or any other malicious url. On seeing it will look like the link will take to the gratipay but onclicking the url it will redirect to the malicious site.Attacker with the help social engg. techniques...

Cisco TelePresence Server Denial of Service Vulnerability (CNVD-2016-02065)

Cisco TelePresence is a Cisco TelePresence solution. Cisco TelePresence Server versions 4.12.29-4.24.17 HTTP parsing engine fails to properly handle constructed URLs, which can allow an unauthenticated, remote attacker to cause reloading of the affected device...