Philips Hue - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Philips Hue published at the 'play' market has multiple vulnerabilities...

О! ТВ - Бесплатное ТВ он-лайн - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application О! ТВ - Бесплатное ТВ он-лайн published at the 'play' market has multiple vulnerabilities...

cp.skratka | Cestovné poriadky - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application cp.skratka | Cestovné poriadky published at the 'play' market has multiple vulnerabilities...

Wallarm is Kairos Society fellow!

Do you know what Kairos Society is? Frankly speaking, we had never heard of it until the beginning of the year. Now we’re amazed at how lucky we are. Here is why. What is Kairos society? Kairos team reached out to us by saying that we’re one of the nominees for Top50 Innovative Companies 2017 —...

CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

Ready Set Vacation! - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Ready Set Vacation! published at the 'play' market has multiple vulnerabilities...

Digiturk Play Yurtdışı - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Digiturk Play Yurtdışı published at the 'play' market has multiple vulnerabilities...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a s...

Wipro Design - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Wipro Design published at the 'play' market has multiple vulnerabilities...

Why Care About Data-Centric Security?

It’s no surprise that data breaches are evolving and becoming increasingly more complex. According to the Verizon 2017 Data Breach Investigation Report, data breaches are “complex affairs often involving some combination of human factors, hardware devices, exploited configurations or malicious...

Denial Of Service (DoS)

github.com/valyala/fasthttp is vulnerable to denial of service DoS attacks. The library does not define a maximum body size for the packets it receives, allowing a malicious user to exhaust the application's memory by sending large packets to it...

Understanding Your Monthly Security Reports

When we first starting a conversation with our prospects, we are frequently asked, “Just how will I know that Wallarm is working?” To help answer that, let’s take a look at the report we sent to one of our customers last week to understand what kind of threats Wallarm defends agains. Wallarm...

Finance Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finance Manager published at the 'play' market has multiple vulnerabilities...

Cash Organizer - finance - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cash Organizer - finance published at the 'play' market has multiple vulnerabilities...

CVE-2017-3544

A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...

Get 1000 like n follower Insta - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get 1000 like n follower Insta published at the 'play' market has multiple vulnerabilities...

Five Reasons Why I Joined Wallarm

By Johan Nordstrom The question of “what made you change jobs?” may be old, but the answer with my move to Wallarm is new and clear. I have a vision how to address the dynamic threat landscape of today and Wallarm’s innovative approach to security is in line with these ideas. In my 30 years caree...

KEOS Nilüfer - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application KEOS Nilüfer published at the 'play' market has multiple vulnerabilities...

Play the guitar master prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Play the guitar master prank published at the 'play' market has multiple vulnerabilities...

GlobaLeaks: Information Disclosure

I have observed that the application is leaking information while accessing "https://demo.globaleaks.org/l10n/en". It does not restrict access to file, which can possibly provide an attacker with information such as default credentials test:test, username for accessing administrative functions,...