PT-2016-6003

Name of the Vulnerable Software and Affected Versions Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers versions prior to 2.1.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE FOR UNTRUSTED...

Conference Caller - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Conference Caller published at the 'play' market has multiple vulnerabilities...

PT-2016-2293

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to 8.1 20160519 Description The issue is related to unspecified ActiveX controls and errors in the code of the Advantech WebAccess software. It may allow a remote authenticated user to obtain sensitive...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

UBUNTU-CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

Fake Call - Caller Prank - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fake Call - Caller Prank published at the 'play' market has multiple vulnerabilities...

Caller Screen Dialer Caller ID - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Caller Screen Dialer Caller ID published at the 'play' market has multiple vulnerabilities...

Caller Name & SMS Talker - External URLs, Suspicious files, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Caller Name & SMS Talker published at the 'play' market has multiple vulnerabilities...

Mobile Caller Location Tracker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Caller Location Tracker published at the 'play' market has multiple vulnerabilities...

CallApp - Caller ID & Block - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application CallApp - Caller ID & Block published at the 'play' market has multiple vulnerabilities...

Clever Dialer - caller ID - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Clever Dialer - caller ID published at the 'play' market has multiple vulnerabilities...

The vulnerability of the RPCbind server for dynamic naming services allows a attacker to cause a service failure.

The vulnerability of the xprtsetcaller function of dynamic naming server RPC ports is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially crafted packets containing the PMAPCALLIT code...

WordPress Payment Gateways Caller Plugin <= 0.1.0 - Local file Inclusion

This plugin is prone to a loadmerchant parameter traversal local file inclusion vulnerability. Solution Update the plugin...

Security: Invalid EJB caller role check implementation

It was found that the isCallerInRole method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles...

Security: Invalid EJB caller role check implementation

It was found that the isCallerInRole method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles...

Security: Invalid EJB caller role check implementation

It was found that the isCallerInRole method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles...

Security: Invalid EJB caller role check implementation

It was found that the isCallerInRole method of the SimpleSecurityManager did not correctly check caller roles. A remote, authenticated attacker could use this flaw to circumvent the caller check in applications that use black list access control based on caller roles...

PT-2015-2193

Name of the Vulnerable Software and Affected Versions rpcbind versions 0.2.1 and earlier Description The issue is related to a use-after-free vulnerability in the xprt set caller function, which can be exploited by remote attackers to cause a denial of service, resulting in a daemon crash. This i...

CVE-2014-5725

CVE-2014-5725 affects the Android app Truecaller (com.truecaller) at version 4.32, where SSL/TLS certificates from servers are not verified. This allows a man-in-the-middle to spoof servers and access sensitive data via a crafted certificate, impacting confidentiality and integrity as described i...

CVE-2014-5725: Undefined Security Weakness

The Truecaller - Caller ID & Block aka com.truecaller application 4.32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...