CVE-2016-2817

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS UXSS attacks via a craft...

Design/Logic Flaw

The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS UXSS attacks via a craft...

Attention! Struts 2 s2-0 3 2 remote code is again a wave of black rhythm-vulnerability warning-the black bar safety net

1. Description: Struts 2 is the Struts of the next generation of products, is in the struts 1 and WebWork technology based on a merge of the new Struts 2 framework. Its brand new Struts 2 architecture and Struts 1 architecture the difference is huge. Struts 2 with WebWork as the core, using the...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-02506 )

Apache Struts is an open source framework for creating enterprise Java Web applications. A remote code execution vulnerability exists in Struts2, which can be exploited by an attacker to execute arbitrary code on the server side of a server that initiates a dynamic method call...

Hackers can spy on your calls and track location, using just your phone number

In Brief The famous ‘60 Minutes’ television show shocked some viewers Sunday evening when a team of German hackers demonstrated how they spied on an iPhone used by U.S. Congressman, then recorded his phone calls and tracked his movement through Los Angeles. Hackers leverage a security flaw in SS7...

UBUNTU-CVE-2016-2410

A Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverages control over a service that can call this driver, aka internal bug 26291677...

Foxit PhantomPDF < 7.3.4 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An...

CVE-2016-0844

The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via a crafted application, aka internal bug 26324307...

Samba Badlock Vulnerability

The version of Samba, a CIFS/SMB server for Linux and Unix, running on the remote host is affected by a flaw, known as Badlock, that exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD protocols due to improper authentication level negotiation over Remote...

Juasapp - Prank Calls - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Juasapp - Prank Calls published at the 'play' market has multiple vulnerabilities...

Elmo Calls by Sesame Street - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Elmo Calls by Sesame Street published at the 'play' market has multiple vulnerabilities...

Video Chat Facetime Call Guide - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Video Chat Facetime Call Guide published at the 'play' market has multiple vulnerabilities...

Bird Calls, Sounds & Ringtones - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bird Calls, Sounds & Ringtones published at the 'play' market has multiple vulnerabilities...

Yolla Free International Calls - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yolla Free International Calls published at the 'play' market has multiple vulnerabilities...

Video Calls for Android Advice - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video Calls for Android Advice published at the 'play' market has multiple vulnerabilities...

Maaii: Free Calls & Messages - BSD license, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Maaii: Free Calls & Messages published at the 'play' market has multiple vulnerabilities...

Popcorn Buzz: Free Group Calls - Corrupted files, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Popcorn Buzz: Free Group Calls published at the 'play' market has multiple vulnerabilities...

Free Calls & Text Messenger - BSD license, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free Calls & Text Messenger published at the 'play' market has multiple vulnerabilities...

Cheap international calls - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cheap international calls published at the 'play' market has multiple vulnerabilities...

BOSS Revolution® - Cheap Calls - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BOSS Revolution® - Cheap Calls published at the 'play' market has multiple vulnerabilities...