Mobile App Native <= 3.0 - Remote File Upload

The code in file ./zen-mobile-app-native/server/images.php doesn't require authentication or check that the user is allowed to upload content. It also doesn't sanitize the file upload against executable code. $ curl -F "file=@/var/www/shell.php"...

Real Fast Followers - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Real Fast Followers published at the 'play' market has multiple vulnerabilities...

Domino Gaple Online - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Domino Gaple Online published at the 'play' market has multiple vulnerabilities...

Silent Phone - private calls - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Silent Phone - private calls published at the 'play' market has multiple vulnerabilities...

Simple App to-end security vulnerability of any debugging vulnerabilities, the middleman hijacking vulnerability and the encryption algorithm vulnerability-vulnerability warning-the black bar safety net

Last week to introduce to the APP-end backup feature is turned on vulnerability and local denial of service vulnerability this week to introduce the completion of the last of the three common App-side vulnerabilities: arbitrary debugging vulnerabilities, MiTM hijacking vulnerability and the...

Simple App to-end security vulnerability of the backup function is enabled and a local denial of service vulnerability-vulnerability warning-the black bar safety net

The last description about the App end to sensitive information leaks, then the App end what security vulnerability is worth the developers food for thought and attention? When an App installed in A mobile phone, the user Joe Smith to login through the App, the login data is stored in the mobile...

StockMarkets - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application StockMarkets published at the 'play' market has multiple vulnerabilities...

Researchers Show How to Steal Tesla Car by Hacking into Owner's Smartphone

New technology is always a little scary, so are Smart Cars. From GPS system and satellite radio to wireless locks, steering, brakes, and accelerator, today vehicles are more connected to networks than ever, and so they are more hackable than ever. It's not new for security researchers to hack...

qmiran - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application qmiran published at the 'play' market has multiple vulnerabilities...

NetGuard - no-root firewall - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NetGuard - no-root firewall published at the 'play' market has multiple vulnerabilities...

Raiffeisen Bank Kosovo - Certificates or keys found, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Raiffeisen Bank Kosovo published at the 'play' market has multiple vulnerabilities...

For a certain APP vulnerability discovery(capture+reverse=dig to the maximum vulnerability)-vulnerability warning-the black bar safety net

Written on the front I learn penetration testing, mainly Web direction in a few months, and now was just getting started. Recall that learning vulnerability discovery process, in addition to watching some of the classic books, the most want to see is a large cattle were dug vulnerability of the...

Uber: private passenger information is exposed to the Uber Driver app during ride dispatch ("Ping") events

This report highlighted that the Uber Driver app did not anonymize the last name and phone number of the rider...

Abandoned Mobile C&C Servers Present Opportunity to Attackers

DENVER—When developers build mobile apps, they’re not only coding functionality, but they’re also dragging in third-party software development kits SDKs for ads, analytics and lots of things in between. A big function of SDKs is to communicate with a central server to receive instructions and...

Alsharqiya TV - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Alsharqiya TV published at the 'play' market has multiple vulnerabilities...

Metal Detector - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Metal Detector published at the 'play' market has multiple vulnerabilities...

Tilt - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Tilt published at the 'play' market has multiple vulnerabilities...

Rambler-Kassa - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rambler-Kassa published at the 'play' market has multiple vulnerabilities...

Sense от Альфа-Банка - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Sense от Альфа-Банка published at the 'play' market has multiple vulnerabilities...

"Hotpatch"potential security risks-vulnerability warning-the black bar safety net

IOS App developers often occur such problems: when a new version launched after the discovery of the presence of a serious bug, likely because of a logic problem resulting in the payment interface there is is pulling the wool of the risk, this time can do only is to get the repair complete securi...