Fashion City 2 - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fashion City 2 published at the 'play' market has multiple vulnerabilities...

Banka Koper Wave2Pay - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Banka Koper Wave2Pay published at the 'play' market has multiple vulnerabilities...

Perchang - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Perchang published at the 'play' market has multiple vulnerabilities...

The Trail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application The Trail published at the 'play' market has multiple vulnerabilities...

Case Clicker 2 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Case Clicker 2 published at the 'play' market has multiple vulnerabilities...

Shadow Fight 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Fight 2 published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Grammar - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Grammar published at the 'play' market has multiple vulnerabilities...

ABN AMRO Mobiel Bankieren - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ABN AMRO Mobiel Bankieren published at the 'play' market has multiple vulnerabilities...

Kamacaca - Premios Gratis - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kamacaca - Premios Gratis published at the 'play' market has multiple vulnerabilities...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Clean Master (Boost & AppLock) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Boost & AppLock published at the 'play' market has multiple vulnerabilities...

Suicide Squad: Special Ops - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Suicide Squad: Special Ops published at the 'play' market has multiple vulnerabilities...

KPMG VR - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KPMG VR published at the 'play' market has multiple vulnerabilities...

Wrike - Project Management - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wrike - Project Management published at the 'play' market has multiple vulnerabilities...

Dashlane: Password Manager App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dashlane: Password Manager App published at the 'play' market has multiple vulnerabilities...

Yandex.Mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Mail published at the 'play' market has multiple vulnerabilities...

디시인사이드 - dcinside - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 디시인사이드 - dcinside published at the 'play' market has multiple vulnerabilities...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

New Relic: SSO Authentication Bypass

Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...