Android WebView Cross Domain Access Vulnerability

Android WebView web view is a control for displaying html text content on Android platform. Android WebView has a cross domain access vulnerability. The vulnerability occurs because the Android application WebView opens the file domain access, and allows the file domain to access the http domain,...

My Vodafone (AL) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Vodafone AL published at the 'play' market has multiple vulnerabilities...

biFoto - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application biFoto published at the 'play' market has multiple vulnerabilities...

Eurowings - cheap flights - Dangerous filesystem permissions, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Eurowings - cheap flights published at the 'play' market has multiple vulnerabilities...

Qapsula: doctor consultations - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Qapsula: doctor consultations published at the 'play' market has multiple vulnerabilities...

mtsTV GO - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application mtsTV GO published at the 'play' market has multiple vulnerabilities...

Shadow Combat Super Battle - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Combat Super Battle published at the 'play' market has multiple vulnerabilities...

WIFI PASSWORD - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WIFI PASSWORD published at the 'play' market has multiple vulnerabilities...

國泰優惠－卡友必下載的國泰APP - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 國泰優惠－卡友必下載的國泰APP published at the 'play' market has multiple vulnerabilities...

ANTICHAT - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ANTICHAT published at the 'play' market has multiple vulnerabilities...

Google Play Bounty Promises $1,000 Rewards for Flaws in Popular Apps

Google has taken a long-awaited step and instituted a public bug bounty focused on finding vulnerabilities in popular mobile apps housed on its Google Play marketplace At the outset, bug-hunters will work directly with developers of popular apps through the HackerOne platform and are in line for...

Madden NFL Football - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Madden NFL Football published at the 'play' market has multiple vulnerabilities...

CryptoShield - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CryptoShield published at the 'play' market has multiple vulnerabilities...

Taiga Mobile Security - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Taiga Mobile Security published at the 'play' market has multiple vulnerabilities...

RPG Toram Online - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RPG Toram Online published at the 'play' market has multiple vulnerabilities...

Textra SMS - Dangerous filesystem permissions, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Textra SMS published at the 'play' market has multiple vulnerabilities...

Météo-France - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Météo-France published at the 'play' market has multiple vulnerabilities...

BadIntent - Intercept, Modify, Repeat and Attack Android's Binder Transactions Using Burp Suite

BadIntent is the missing link between the Burp Suite and the core Android's IPC/Messaging-system. BadIntent consists of two parts, an Xposed-based module running on Android and a Burp-plugin. Based on this interplay, it is possible to use the Burp's common workflow and all involved tools and...

MARVEL Future Fight - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MARVEL Future Fight published at the 'play' market has multiple vulnerabilities...

Hesport - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hesport published at the 'play' market has multiple vulnerabilities...