Unable to enroll more than two devices per user to XenMobile Server

When trying to enroll an iOS device with an user account that already has 2 devices enrolled, the enrollment would fail during the 2nd profile installation, with the following error message :Profile installation failed -A connection to the server could not be established On Android, the same...

CVE-2016-3901

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm...

UBUNTU-CVE-2016-3865

The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28799389...

Error: "SHTP0003: A required parameter is missing. User or Password missing" on Secure Hub

We have a XenMobile environment and we can enroll iOS devices and deploy applications successfully. However, when we use an Android device, the enrollment completes successfully, but applications will not install. On the Android device the applications are greyed out with a spinner and there is a...

UBUNTU-CVE-2015-8939

drivers/video/msm/mdp4util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug...

Android Device Manager - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Android Device Manager published at the 'play' market has multiple vulnerabilities...

2015 Google Android Security Report

Last year was a landmark time for Android security. Google dealt with a major vulnerability in Stagefright, launched a monthly patch release and vulnerability rewards program, and continued to chip away at the number of malicious applications that find their way onto devices. Given all of that...

Coinbase: Session Issue Maybe Can lead to huge loss [CRITICAL]

Hey Coinbase, I have some found some sessions issues linking your web and the coinbase wallet means the android application, So as the user authenticates from the android app An android device linked is shown on this page : https://www.coinbase.com/settings/securitysettings POC: 1 Open android ap...

This Malware Can Secretly Auto-Install any Android App to Your Phone

Own an Android Smartphone? Hackers can install any malicious third-party app on your smartphone remotely even if you have clearly tapped a reject button of the app. Security researchers have uncovered a trojanized adware family that has the capability to automatically install any app on an Androi...

Lost Your Phone? Google Search 'Find My Phone' To Locate It

How many of you have an issue to forget your mobile phones? I guess, most of us. Sometimes in our homes, sometimes in our offices, sometimes in our cars and sometimes we even don’t remember the exact place where we left our phones. Now, Finding your phone is as simple as searching something on...

AirDroid Web Application Hijacking Vulnerability Patched

AirDroid has patched an authentication flaw in its web application that could allow an attacker to remotely control and manipulate a victim’s Android device. AirDroid, which is similar to Apple’s native iMessage app, allows a user to send SMS messages, make calls, add contacts and more via a...

AppUse - Android Pentest Platform Unified Standalone Environment

AppUse Virtual Machine, developed by AppSec Labs, is a unique and free system, a platform for mobile application security testing in the android environment, and it includes unique custom-made tools. Faster & More Powerful The system is a blessing to security teams, who from now on can easily...

facebook - Grabbing permanent access token which Never expires of your accounts and pages .

The bug is that we can generate access token of our account which have all the permissions that normally a facebook user have that is to read , write , modify ,etc . Note : Permissions are depend on app by Which facebook access token is grabbed . Note: Mainly you can grab only your temporary acce...

Seemingly malformed PNG file will cause JIRA to OOM within seconds

.atlassian.net was chain-OOM-ing earlier today. jworley was able to narrow it down to an image attachment on a particular issue. It's only a 300KB PNG file a screenshot from an Android device but it causes JIRA to OOM almost immediately. I've been able to replicate that behaviour on my jira-dev...

Seemingly malformed PNG file will cause JIRA to OOM within seconds

.atlassian.net was chain-OOM-ing earlier today. jworley was able to narrow it down to an image attachment on a particular issue. It's only a 300KB PNG file a screenshot from an Android device but it causes JIRA to OOM almost immediately. I've been able to replicate that behaviour on my jira-dev...

Android Device Manager allows user to Lock, Wipe and Locate device remotely

If you lose your device, Google lets you secure it instantly from afar through Android Device Manager, that let you locate and remotely wipe your phones and tablets. The latest update to Android Device Manager enables remote password locking, overrides the built-in Pattern, PIN code, Face unlock ...

Pwn Pad Android device, Network hacking machine launched

Security tools company Pwnie Express is making a network hacking focused Android device called the Pwn Pad. The device is based on the Google Nexus 7 specs, with USB-based Bluetooth, Ethernet and WiFi to gauge the security of a network beyond what Google's tablet can manage on its own. Pwn Pad wi...

Pwn Pad Android device, Network hacking machine launched

Security tools company Pwnie Express is making a network hacking focused Android device called the Pwn Pad. The device is based on the Google Nexus 7 specs, with USB-based Bluetooth, Ethernet and WiFi to gauge the security of a network beyond what Google's tablet can manage on its own. Pwn Pad wi...

[SECURITY] Fedora 18 Update: android-tools-20130123git98d0789-1.fc18

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

Google Market bug for Android 4.1.1 => 4.2 Remote Target Download PoC

The ability to remotely install applications on the target device. In such way you can install bad soft and also can install so many apps then memory of device will be filled. Google Market bug for Android 4.1.1 = 4.2 Jelly Bean Remote Target Download PoC You need: 1 Google Account 2 Android devi...