PT-2017-15176

Name of the Vulnerable Software and Affected Versions Cybozu KUNAI for Android versions 3.0.4 through 3.0.5.1 Description The issue allows remote attackers to obtain log information through a malicious Android application. Recommendations For Cybozu KUNAI for Android versions 3.0.4 through 3.0.5....

Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...

Design/Logic Flaw

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8221

Wireless IP Camera P2P WIFICAM devices rely on a cleartext UDP tunnel protocol aka the Cloud feature for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2017-8221

Wireless IP Camera (P2P) WIFICAM devices are vulnerable to sensitive information disclosure because they utilize a cleartext UDP tunnel protocol (referred to as the Cloud feature) for communication between an Android application and the camera. This lack of encryption allows remote attackers to o...

CVE-2016-1520

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application...

CVE-2016-9319: Improper Certificate Validation

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

Android Package Inspector: Inspeckage

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...

VeryAndroid SMS & MMS Backup - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application VeryAndroid SMS & MMS Backup published at the 'play' market has multiple vulnerabilities...

X (Formerly Twitter): Vine - overwrite account associated with email via android application

Hi, It's possible to deny any user from logging in to his account by overwriting the password associated with his email. This is not an account takeover because while we do override the password associated with that specific mail we just login to a "new" account and not the user's original one...

Simple Android application service end of the security vulnerability of SQL injection vulnerability and file upload vulnerability-vulnerability warning-the black bar safety net

The first three weeks, the dandelion for everyone brief introduction to the Android application of APP end of the Common Vulnerabilities, they are: Android-developers APP end common security vulnerability interpretation-sensitive information disclosure vulnerability Simple App end security...

HS-110 Smart Plug Account Takeover / Insecure Design

Content Table 1. Introduction 2. The Firmware 3. The Android Application 4. The Problems 5. Conclusion 6. Appendix 6.1. Excursion Dalvik 6.2 Control script 1. Introduction The HS-110 is a Smart Plug meaning it is capable of being controlled with commands via a network. TP-Link released a mobile...

Ali poly security Android application vulnerability scanner analysis: local denial of service detection detailed explanation-vulnerability warning-the black bar safety net

Ali poly security of the Android application vulnerability scanners have a detection item is a local denial of service vulnerability detection using static analysis applied motion blur test of the method to the detection, the detection results are accurate and comprehensive. This article will tal...

China Mobile 139 Mailbox Android V6.6.1 suffers from gesture password plaintext storage vulnerability

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A vulnerability exists in the plaintext storage of gesture passwords in China Mobile 139 Mailbox Android V6.6.1. Since the user's gesture password storage is not encrypted, an attacker can utilize the vulnerability to...

Man-in-the-middle attack vulnerabilities in multiple DMM products

DMM FX Trade for Android and others are Android-based applications developed by DMM Securities Inc. of Japan for foreign exchange trade transactions. A security vulnerability exists in several DMM products, which stems from the program's failure to validate SSL server certificates. An attacker...

Free Kids Musical Instruments - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Kids Musical Instruments published at the 'play' market has multiple vulnerabilities...

Booster for Android - FREE - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Booster for Android - FREE published at the 'play' market has multiple vulnerabilities...

Auto 4 Android™ Read Message - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Auto 4 Android™ Read Message published at the 'play' market has multiple vulnerabilities...

Photo Editor for Android - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor for Android published at the 'play' market has multiple vulnerabilities...

AA App for Android™ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AA App for Android™ published at the 'play' market has multiple vulnerabilities...