WeiPHP v4.0 beta SQL Injection Vulnerability in Frontend AppsLinkController.class.php Page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. WeiPHP v4.0 beta SQL injection vulnerability exists in the front-end AppsLinkController.class.php page. The vulnerability is due to the public function del...

A Company Offers $500,000 For Secure Messaging Apps Zero-Day Exploits

How much does your privacy cost? It will soon be sold for half a Million US dollars. A controversial company specialises in acquiring and reselling zero-day exploits is ready to pay up to US$500,000 for working zero-day vulnerabilities targeting popular secure messenger applications, such as...

Android Spyware Linked to Chinese SDK Forces Google to Boot 500 Apps

More than 500 Android mobile apps have been removed from Google Play after it was discovered that an embedded advertising SDK could be leveraged to quietly install spyware on devices. The SDK, called Igexin, was developed by a Chinese company and may have been used to install malware that could,...

A week in security (August 14 – August 20)

Last week, we gave some security tips for parents and kids aimed at the new school term. We also took a peek at the inside of the Kronos malware, focusing on how it works and protects itself. And, once again, we spotted a return of Locky ransomware with two new flavors at once, diablo6 and Lukitu...

Uber users beware; Faketoken Android malware hits ride-sharing apps

By Waqas The new version of Faketoken Malware Targets Uber-Like Apps to This is a post from HackRead.com Read the original post: Uber users beware; Faketoken Android malware hits ride-sharing apps...

Android Trojan Now Targets Non-Banking Apps that Require Card Payments

The infamous mobile banking trojan that recently added ransomware features to steal sensitive data and lock user files at the same time has now been modified to steal credentials from Uber and other booking apps as well. Security researchers at Kaspersky Lab have discovered a new variant of the...

Booking a Taxi for Faketoken

The Trojan-Banker.AndroidOS.Faketoken malware has been known about for already more than a year. Throughout the time of its existence, it has worked its way up from a primitive Trojan intercepting mTAN codes to an encrypter. The authors of its newer modifications continue to upgrade the malware,...

Lack of signature authentication vulnerability in some Huawei apps

Some Huawei APPs are vulnerable to lack of signature verification. Since some Huawei APPs do not support APK file signature verification. Attackers can use this vulnerability to hijack and replace APK files. Successful exploitation can lead to APP hijacking...

Security Advisory - Authentication Bypass Vulnerability in Huawei Honor 5S Smart Phones

Huawei Honor 5S smart phones have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without...

Thousands of Android Apps Infected with SonicSpy Spyware

By Uzair Amir Google Play is believed to be the best platform for This is a post from HackRead.com Read the original post: Thousands of Android Apps Infected with SonicSpy Spyware...

APKiD - Android Application Identifier for Packers, Protectors, Obfuscators and Oddities

APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android Apps...

CVE-2017-10142

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: Mobile Apps. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10135

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with...

Lawsuit Alleges Disney Illegally Tracks Children Via Apps

The Walt Disney Company is fighting allegations this week that its apps fail to safeguard children’s personal information. The move follows a class action lawsuit brought against the company and four others who produce the apps. According to the complaint .PDF, Amanda Rushing and her child filed...

Debian Security Advisory DSA 3926-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox. CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library. CVE-2017-5089 Michal Bentkowski discovered a spoofing issue...

androidappsapk.co XSS vulnerability

Vulnerable URL: https://androidappsapk.co/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

chromium-browser: use after free in chrome apps

A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

A new era in mobile banking Trojans

In mid-July 2017, we found a new modification of the well-known mobile banking malware family Svpeng – Trojan-Banker.AndroidOS.Svpeng.ae. In this modification, the cybercriminals have added new functionality: it now also works as a keylogger, stealing entered text through the use of accessibility...

CVE-2017-9492

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...

Apple has removed all major VPN apps from Chinese App Store

By Carolina China is well known for its online censorship and surveillance This is a post from HackRead.com Read the original post: Apple has removed all major VPN apps from Chinese App Store...