WebView Component Google Chrome Unauthorized Access

The vulnerability of the WebView component for displaying web pages and the Google Chrome browser is related to errors in applying access control rules. Exploiting this vulnerability allows a perpetrator to gain unauthorized access to information...

Critical OkCupid Flaw Exposed Daters to App Takeovers

A critical flaw in the OkCupid app has been found that could allow a bad actor to steal credentials, launch man-in-the-middle attacks or completely compromise the victim’s application. This is separate from the OKCupid account-takeover incident reported earlier in the week, but it does fit the...

Yosoro 1.0.4 Remote Code Execution

Exploit title: Yosoro 1.0.4 - Remote Code Execution Date: 2018-05-29 Exploit Author: Carlo Pelliccioni Vendor homepage: https://yosoro.coolecho.net/ Software link: https://github.com/IceEnd/Yosoro/releases/download/v1.0.4/Yosoro-darwin-x64-1.0.4.zip Version: 1.0.4 Tested on: MacOS 10.13.4 CVE:...

CVE-2016-4839

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

QPython3 - Python3 for Android - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application QPython3 - Python3 for Android published at the 'play' market has multiple vulnerabilities...

hocus. - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application hocus. published at the 'play' market has multiple vulnerabilities...

Kizi - Cool Fun Games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kizi - Cool Fun Games published at the 'play' market has multiple vulnerabilities...

Pittsburgh Steelers - Dangerous filesystem permissions, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pittsburgh Steelers published at the 'play' market has multiple vulnerabilities...

Galaxy Trio: Brick Breaker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy Trio: Brick Breaker published at the 'play' market has multiple vulnerabilities...

Money Forward Apps for Android vulnerable in the WebView class

Overview Money Forward Apps for Android contain a vulnerability in the WebView class. Kenta Suefusa, Akinori Konishi and Tomonori Shiomi of Sprout Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a us...

JVN#61297210: Money Forward Apps for Android vulnerable in the WebView class

Money Forward Apps for Android contain a vulnerability in the WebView class. Impact If a user of the affected product uses another malicious Android application, information managed by the affected product may be disclosed. Solution Update the application Update to the latest version according to...

Badi - room rentals - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Badi - room rentals published at the 'play' market has multiple vulnerabilities...

Ротапост - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ротапост published at the 'play' market has multiple vulnerabilities...

Алкоголь Сканер - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Алкоголь Сканер published at the 'play' market has multiple vulnerabilities...

Power Hit Radio Eesti - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Hit Radio Eesti published at the 'play' market has multiple vulnerabilities...

Miss Hollywood: Vacation - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Miss Hollywood: Vacation published at the 'play' market has multiple vulnerabilities...

Osthessen News - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Osthessen News published at the 'play' market has multiple vulnerabilities...

Battle Champs - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Battle Champs published at the 'play' market has multiple vulnerabilities...

食べないと死ぬ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 食べないと死ぬ published at the 'play' market has multiple vulnerabilities...

ぼくとドラゴン【仲間とわいわいリアルタイムバトル】 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ぼくとドラゴン【仲間とわいわいリアルタイムバトル】 published at the 'play' market has multiple vulnerabilities...