kauth: service invoking dbus is not properly checked and allows local privilege escalation

A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application...

DEBIAN-CVE-2017-8422

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app...

Number book : real & caller ID - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Number book : real & caller ID published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2017-8422

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app...

CIA - Caller ID & Call Blocker - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CIA - Caller ID & Call Blocker published at the 'play' market has multiple vulnerabilities...

CVE-2016-4721

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" notification...

CVE-2016-4721

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" notification...

CVE-2016-4721

CVE-2016-4721 affects Apple’s IDS - Connectivity component on iOS < 10.1 and macOS

Caller ID + - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Caller ID + published at the 'play' market has multiple vulnerabilities...

InTerCyber company in the message in the system discovered a serious vulnerability-a vulnerability warning-the black bar safety net

According to foreign media the latest report, information security company InTheCyber Security Studies experts discovered a serious vulnerability, this vulnerability or can affect the message system security. Note that this vulnerability using the method is not difficult, an attacker can easily...

Saudi phone book & Caller Id - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Saudi phone book & Caller Id published at the 'play' market has multiple vulnerabilities...

Updated perl-XSLoader packages fix security vulnerability

An arbitrary code execution can be achieved if loading code from untrusted current working directory despite the '.' is removed from @INC. Vulnerability is in XSLoader that uses caller information to locate .so file to load. If malicious attacker creates directory named eval 1 with malicious bina...

CVE-2016-4529

An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFEFORUNTRUSTEDCALLER aka safe for scripting flag...

Conference Caller - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Conference Caller published at the 'play' market has multiple vulnerabilities...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

UBUNTU-CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

Fake Call - Caller Prank - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fake Call - Caller Prank published at the 'play' market has multiple vulnerabilities...

Caller Screen Dialer Caller ID - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Caller Screen Dialer Caller ID published at the 'play' market has multiple vulnerabilities...

Caller Name & SMS Talker - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Caller Name & SMS Talker published at the 'play' market has multiple vulnerabilities...

Mobile Caller Location Tracker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Caller Location Tracker published at the 'play' market has multiple vulnerabilities...