Mobileye 5 - Series pro app - Dangerous filesystem permissions, Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Mobileye 5 - Series pro app published at the 'play' market has multiple vulnerabilities...

Multiple Apple Products ICU Component Arbitrary Code Execution Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system; ICU is a Unicode-enabled, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in...

ABAX Worker - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application ABAX Worker published at the 'play' market has multiple vulnerabilities...

МегаДиск - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application МегаДиск published at the 'play' market has multiple vulnerabilities...

CVE-2016-6657

An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of affected versions should apply the following mitigation: Upgrade PCF Elastic Runtime 1.8.x versions to 1.8.12 or later. Upgrade PCF Ops Manager 1.7.x versions to 1.7.18 or later a...

Sakh.com - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Sakh.com published at the 'play' market has multiple vulnerabilities...

Code Reuse a Peril for Secure Software Development

The amount of insecure software tied to reused third-party libraries and lingering in applications long after patches have been deployed is staggering. It’s a habitual problem perpetuated by developers failing to vet third-party code for vulnerabilities, and some repositories taking a hands-off...

CVE-2016-4046

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...

CVE-2016-4046

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network components within the trust boundary of the operator. Users can inject arbitrary hosts and ports to API calls. Depending on the response typ...

Вызов Намба Такси Namba Taxi - Certificates or keys found, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Вызов Намба Такси Namba Taxi published at the 'play' market has multiple vulnerabilities...

Propana Reload - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Propana Reload published at the 'play' market has multiple vulnerabilities...

Renault Connected Car - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Renault Connected Car published at the 'play' market has multiple vulnerabilities...

Dirty Cow Vulnerability Patched in Android Security Bulletin

The Dirty Cow vulnerability lived in Linux for close to a decade, and while it was patched in October in the kernel and in Linux distributions, Android users had to wait for more than a month for their fix. Today, Google included a patch for CVE-2016-5195 in the monthly Android Security Bulletin,...

Microsoft Authorization Manager azman XML External Entity Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================== www.microsoft.com Product: ============================== Microsoft Authorization Manager v6.1.7601 The Authorization Manager allows you to set role-based permissions for...

R4S Gateway - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application R4S Gateway published at the 'play' market has multiple vulnerabilities...

SmartPay - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SmartPay published at the 'play' market has multiple vulnerabilities...

ElfYourself by Office Depot - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ElfYourself by Office Depot published at the 'play' market has multiple vulnerabilities...

Google Santa Tracker - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Google Santa Tracker published at the 'play' market has multiple vulnerabilities...

CVE-2016-6753

An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it...

CVE-2016-6753

An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it...