CVE-2017-9595

The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2017-9572

The athens-state-bank-mobile-banking/id719748589 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9587

The CVE-2017-9587 entry concerns the PCSB BANK Mobile iOS app (version 3.0.4, identifier pcsb-bank-mobile/id1067472090) that does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected documen...

CVE-2017-9576

CVE-2017-9576 affects the iOS version of the Middleton Community Bank Mobile Banking app (3.0.0), where the app does not verify X.509 certificates when establishing SSL/TLS connections. This weakness can allow a man-in-the-middle attacker to spoof legitimate servers and exfiltrate sensitive infor...

GIPHY Stickers - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GIPHY Stickers published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

OrangePlay - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application OrangePlay published at the 'play' market has multiple vulnerabilities...

Home TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Home TV published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

rifcity.de - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application rifcity.de published at the 'play' market has multiple vulnerabilities...

Idle Heroes - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Idle Heroes published at the 'play' market has multiple vulnerabilities...

Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Lyft - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lyft published at the 'play' market has multiple vulnerabilities...

Zenmoney: expense tracker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zenmoney: expense tracker published at the 'play' market has multiple vulnerabilities...

4 ways mobile devices still threaten your business

Mobile devices have been commonly used in corporate environments for decades - bulky portable telephones, heavy laptops and PDAs. Then along came Apple and the smartphone, and soon everyone either had personal smartphone or expected their employers to provide one. Since then, enterprise mobility...

Twitter - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Twitter published at the 'play' market has multiple vulnerabilities...

Description of the security update for SharePoint Server 2010 Excel Web App: April 11, 2017

Description of the security update for SharePoint Server 2010 Excel Web App: April 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...

eMoney - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application eMoney published at the 'play' market has multiple vulnerabilities...

Kids YouTube - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids YouTube published at the 'play' market has multiple vulnerabilities...

PAC-MAN Pop - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PAC-MAN Pop published at the 'play' market has multiple vulnerabilities...