SiteBuilder Dynamic Components <= 1.0 - Unauthenticated PHP Object Injection

The plugin sitebuilder-dynamic-components insecurely trusts serialized data submitted over AJAX requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. PoC Attack is exploitable over AJAX calls sites with the sitebuilder-dynamic-components Plugin...

Uber - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Uber published at the 'play' market has multiple vulnerabilities...

Post.kz от Kazpost - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Post.kz от Kazpost published at the 'play' market has multiple vulnerabilities...

Sands Resorts Macao - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Sands Resorts Macao published at the 'play' market has multiple vulnerabilities...

[20170705] - Core - XSS Vulnerability

Inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components...

CVE-2017-7986

In Joomla! 1.5.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components...

Wally+ - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Wally+ published at the 'play' market has multiple vulnerabilities...

Google Chrome International Components for Unicode for C/C++ Denial of Service Vulnerability

Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU for C/C++ is a Unicode-supported, software internationalization, globalization C/C++ library. ICU for C/C++ in Google Chrome versions prior to 40.0.2214.91 A security vulnerability exists in the Regul...

스토리채널 - Corrupted files, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application 스토리채널 published at the 'play' market has multiple vulnerabilities...

CVE-2014-9654

The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of...

아지트 Agit - 함께 소통하는 업무용 커뮤니티 - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application 아지트 Agit - 함께 소통하는 업무용 커뮤니티 published at the 'play' market has multiple vulnerabilities...

ZORE App - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ZORE App published at the 'play' market has multiple vulnerabilities...

SSHDroid - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SSHDroid published at the 'play' market has multiple vulnerabilities...

SD Maid - System Cleaning Tool - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application SD Maid - System Cleaning Tool published at the 'play' market has multiple vulnerabilities...

AVPlayer Plus - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application AVPlayer Plus published at the 'play' market has multiple vulnerabilities...

Fashionbox Live - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Fashionbox Live published at the 'play' market has multiple vulnerabilities...

PTV Sports Cricket Station - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application PTV Sports Cricket Station published at the 'play' market has multiple vulnerabilities...

Loan calculator PRO - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Loan calculator PRO published at the 'play' market has multiple vulnerabilities...

Personal finance - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Personal finance published at the 'play' market has multiple vulnerabilities...

Saver 2.0 - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Saver 2.0 published at the 'play' market has multiple vulnerabilities...