CVE-2016-3936

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568...

Кредиты и микро-займы онлайн - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Кредиты и микро-займы онлайн published at the 'play' market has multiple vulnerabilities...

SQL Injection Vulnerability in Fuzhou Tranda Special Equipment Safety Monitoring System

Fuzhou Chuangda special equipment safety monitoring system using B / S structure, the use of J2EE for development, the system can run on any operating system platform, running into the server and client operation, the server runs the corresponding WEB APPLICATION services such as: TOMCAT, JBOSS,...

vlcms \Application\Media\Controller\DownController.class.php arbitrary File Download

No description provided by source...

Gratipay: The contribution save option seem to be vulnerable to CSRF

The application is vulnerable to Cross Site Request Forgery ==================== Description --------------------- The option in the application to save weekly contribution for a project is vulnerable to Cross Site Request forgery. Note: I am unable to perform the action itself normally. But it i...

CVE-2016-2493

The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 2013, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522...

CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails t...

iScripts EasyCreate Remote Code Execution Vulnerability

iScripts EasyCreate is an online website builder that can be used on a server to provide website building services to clients and is fully customizable. A remote code execution vulnerability exists in iScripts EasyCreate. The 'userImages' POST parameter of the '/ajaximageupload.php' script fails ...

アイドルマスター シンデレラガールズ - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application アイドルマスター シンデレラガールズ published at the 'play' market has multiple vulnerabilities...

Little Things® Forever - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Little Things® Forever published at the 'play' market has multiple vulnerabilities...

Swipe Train–For Kids&Toddler - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Swipe Train–For Kids&Toddler published at the 'play' market has multiple vulnerabilities...

Puppet Tennis-Forehand topspin - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Puppet Tennis-Forehand topspin published at the 'play' market has multiple vulnerabilities...

Arrow Crossword - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Arrow Crossword published at the 'play' market has multiple vulnerabilities...

Picture Quiz: Logos Answer - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Picture Quiz: Logos Answer published at the 'play' market has multiple vulnerabilities...

Zgadnij co to? - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zgadnij co to? published at the 'play' market has multiple vulnerabilities...

Cato and Macro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cato and Macro published at the 'play' market has multiple vulnerabilities...

Shift Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Shift Free published at the 'play' market has multiple vulnerabilities...

Slots Lost Treasure Slot Games - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Slots Lost Treasure Slot Games published at the 'play' market has multiple vulnerabilities...

Candy Blast Mania - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Candy Blast Mania published at the 'play' market has multiple vulnerabilities...

SpeedBoat Shooting - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SpeedBoat Shooting published at the 'play' market has multiple vulnerabilities...