China Mobile 139 Mailbox Android V6.6.1 suffers from gesture password plaintext storage vulnerability

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A vulnerability exists in the plaintext storage of gesture passwords in China Mobile 139 Mailbox Android V6.6.1. Since the user's gesture password storage is not encrypted, an attacker can utilize the vulnerability to...

Man-in-the-middle attack vulnerabilities in multiple DMM products

DMM FX Trade for Android and others are Android-based applications developed by DMM Securities Inc. of Japan for foreign exchange trade transactions. A security vulnerability exists in several DMM products, which stems from the program's failure to validate SSL server certificates. An attacker...

Free Kids Musical Instruments - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Kids Musical Instruments published at the 'play' market has multiple vulnerabilities...

Booster for Android - FREE - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Booster for Android - FREE published at the 'play' market has multiple vulnerabilities...

Auto 4 Android™ Read Message - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Auto 4 Android™ Read Message published at the 'play' market has multiple vulnerabilities...

Photo Editor for Android - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor for Android published at the 'play' market has multiple vulnerabilities...

AA App for Android™ - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AA App for Android™ published at the 'play' market has multiple vulnerabilities...

AC News & Forums for Android™ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application AC News & Forums for Android™ published at the 'play' market has multiple vulnerabilities...

MOTORRAD für Android - BSD license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MOTORRAD für Android published at the 'play' market has multiple vulnerabilities...

Video face time for android - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video face time for android published at the 'play' market has multiple vulnerabilities...

AntiVirus Android - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application AntiVirus Android published at the 'play' market has multiple vulnerabilities...

ok.ru: Multiple critical vulnerabilities in Odnoklassniki Android application

Hello, I have recently found several critical vulnerabilities in Odnoklassniki Android application, which is one of your projects, thus I am reporting it here. The first vulnerability is so called Intent spoofing. The vulnerability lies in ability to start the video upload activity of Odnoklassni...

Newphoria Photon Application Authentication Bypass Vulnerability

Newphoria Photon for Android is a suite of lighting applications based on the Android platform from the Japanese company Newphoria. A security restriction bypass vulnerability exists in the Newphoria Photon application. It allows attackers to bypass URL whitelisting protection mechanisms and gain...

ownCloud: Webview Vulnerablity [OwnCloudAndroid Application]

Hi OwnCloud Team , Vulnerability Description: What is Webview?: We can load a remote URL or display HTML pages stored in our application within an activity using WebView. Internally it uses WebKit rendering engine to display web pages. It supports methods to navigate forward and backward, text...

Vine Android Mobile Application Detection

Binary data 8777.prm...

Siemens HomeControl for Room Automation for Android SSL Certificate Man-in-the-Middle Attack Vulnerability

Siemens HomeControl for Room Automation for Android is an Android-based home automation control software. Siemens HomeControl for Room Automation for Android fails to properly validate X.509 certificates, which allows spoofing of TLS/SSL servers via forged certificates and can be exploited by...

ES File Explorer v3.2.4.1 - Path Traversal Vulnerability

Document Title: =============== ES File Explorer v3.2.4.1 - Path Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1435 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1876 CVE-ID: ======= CVE-2015-1876 Release Date:...

WiFi File Browser Pro v2.0.8 - Code Execution Vulnerability

WiFi File Browser Pro version 2.0.8 suffers from a code execution vulnerability. Product & Service Introduction: =============================== WiFi File Browser allows you to download and upload files to your mobile device by using your favourite web browser without the need of a USB cable. The...

CVE-2014-7793

The CB - Calciatori Brutti aka com.calciatori.brutti application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7744

The Musulmanin.com aka com.wSalyafiyailimurdjiya application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...