GHSA-8XWG-WV7V-4VQP Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration

A vulnerability has been discovered which allows Node.js integration to be re-enabled in some Electron applications that disable it. For the application to be impacted by this vulnerability it must meet all of these conditions - Runs on Electron 1.7, 1.8, or a 2.0.0-beta - Allows execution of...

Zomato: [Zomato Android/iOS] Theft of user session

Hi, I'd like to report a bug which allows to theft user data even without installing third-party apps. Activity xml is exported, and can be accessed by browser. When any WebView in a client app, or a browser meets a zomato://etc URL it will automatically launch Zomato app. File...

WondrGo - Event discovery made easy - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WondrGo - Event discovery made easy published at the 'play' market has multiple vulnerabilities...

Eidoo - BSD license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Eidoo published at the 'play' market has multiple vulnerabilities...

Solitaire TriPeaks - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire TriPeaks published at the 'play' market has multiple vulnerabilities...

eXpimal free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application eXpimal free published at the 'play' market has multiple vulnerabilities...

Cross-domain high-risk vulnerability in WebView component for iOS platforms

WebView is an iOS control for displaying web pages, which is based on the Webkit engine and presents a web page.In addition to the properties and settings of a typical View, WebView controls can handle URL requests, page loading, rendering, and page interactions. The iOS platform WebView componen...

МТС Банк - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application МТС Банк published at the 'play' market has multiple vulnerabilities...

Cheap International Calls & Low Cost Roaming - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cheap International Calls & Low Cost Roaming published at the 'play' market has multiple vulnerabilities...

My Telekom - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Telekom published at the 'play' market has multiple vulnerabilities...

BVG FahrInfo Plus - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BVG FahrInfo Plus published at the 'play' market has multiple vulnerabilities...

Booking.com Hotels & Vacation Rentals - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Booking.com Hotels & Vacation Rentals published at the 'play' market has multiple vulnerabilities...

Android WebView Cross Domain Access Vulnerability

Android WebView web view is a control for displaying html text content on Android platform. Android WebView has a cross domain access vulnerability. The vulnerability occurs because the Android application WebView opens the file domain access, and allows the file domain to access the http domain,...

My Vodafone (AL) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Vodafone AL published at the 'play' market has multiple vulnerabilities...

biFoto - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application biFoto published at the 'play' market has multiple vulnerabilities...

Eurowings - cheap flights - Dangerous filesystem permissions, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Eurowings - cheap flights published at the 'play' market has multiple vulnerabilities...

Qapsula: doctor consultations - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Qapsula: doctor consultations published at the 'play' market has multiple vulnerabilities...

mtsTV GO - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application mtsTV GO published at the 'play' market has multiple vulnerabilities...

Shadow Combat Super Battle - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Combat Super Battle published at the 'play' market has multiple vulnerabilities...

WIFI PASSWORD - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WIFI PASSWORD published at the 'play' market has multiple vulnerabilities...