DVHMA

DVHMA DVHMADamn Vulnerable Hybrid Mobile App는 의도적으로 취약점을 포함한 하이브리드 모바일 앱Android용입니다. 그 목적은 보안 전문가가 합법적으로 자신의 도구와 기술을 테스트하고, 개발자가 안전한 하이브리드 모바일 앱 개발의 일반적인 함정을 더 잘 이해할 수 있도록 하는 것입니다. 동기 및 범위 이 앱은 Apache Cordova 또는 SAP Kapsel과 같은 도구를 사용하여 안전한 하이브리드 앱 개발의 함정을 연구하기 위해 개발되었습니다. 현재 주요 초점은 JavaScript-Jav...

EUVD-2014-3503

Malware in sbrugna...

EUVD-2014-3504

Malware in sbrugna...

EUVD-2014-0165

Malware in sbrugna...

EUVD-2020-1079

Malware in sbrugna...

EUVD-2015-5209

Malware in sbrugna...

EUVD-2015-8204

Malware in sbrugna...

EUVD-2014-1946

Malware in sbrugna...

EUVD-2014-3502

Malware in sbrugna...

EUVD-2012-6483

Malware in sbrugna...

EUVD-2015-5208

Malware in sbrugna...

EUVD-2014-1943

Malware in sbrugna...

EUVD-2015-5205

Malware in sbrugna...

EUVD-2015-1950

Malware in sbrugna...

EUVD-2015-5244

Malware in sbrugna...

EUVD-2022-3206

Malicious code in bioql PyPI...

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

Apache Cordova App Harness Targeted in Dependency Confusion Attack

Researchers have identified a dependency confusion vulnerability impacting an archived Apache project called Cordova App Harness. Dependency confusion attacks take place owing to the fact that package managers check the public repositories before private registries, thus allowing a threat actor t...

Apache Cordova Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Apache Cordova InAppBrowser 3.0.0 and prior versions. An attacker could exploit the vulnerability to execute arbitrary JavaScript code in the main application web view with the help of a specially crafted gap-iab:URI...

Android Trojan GriftHorse, the gift horse you definitely should look in the mouth

Researchers at Zimperium have discovered an aggressive mobile premium services campaign with over 10 million victims all over the world. The stolen amount could amass hundreds of millions of Euros. The scam was hidden behind malicious Android apps, and the researchers have named the Trojan...