Mingle - Meet Chat Date Video - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Mingle - Meet Chat Date Video published at the 'play' market has multiple vulnerabilities...

billiger.de Preisvergleich - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application billiger.de Preisvergleich published at the 'play' market has multiple vulnerabilities...

Timesheet - Time Tracker - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Timesheet - Time Tracker published at the 'play' market has multiple vulnerabilities...

FixIt Mobile - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application FixIt Mobile published at the 'play' market has multiple vulnerabilities...

Train Building Set for Kids - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Train Building Set for Kids published at the 'play' market has multiple vulnerabilities...

UglyBooth - Dynamic Code Loading, Exported ContentProvider, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application UglyBooth published at the 'play' market has multiple vulnerabilities...

How To Draw Snake Animals - Base64 encoded String, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application How To Draw Snake Animals published at the 'play' market has multiple vulnerabilities...

Hugendubel eBooks für tolino - Customized SSL, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Hugendubel eBooks für tolino published at the 'play' market has multiple vulnerabilities...

Content Provider file directory traversal vulnerability analysis-vulnerability warning-the black bar safety net

The 1. File directory traversal vulnerabilities description Android Content Provider file directory traversal security vulnerabilities, the vulnerabilities stem from external exposure Content Provider components of the application, not the Content Provider component to access the access control...

Kaseya Browser 7.0 Android Path Traversal

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Kaseya Browser Android Path Traversal Affected Versions: Kaseya Browser 7.0 Android PDF:...

CVE-2014-1986

The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...

Design/Logic Flaw

The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...

CVE-2014-1986

The CVE refers to the Content Provider in KOKUYO S&T Co.’s CamiApp for Android (V1.21.1 and earlier). The root cause is that access permissions are not restricted, allowing a crafted or malicious Android application to read (and potentially modify) database information. Affected product: CamiApp ...

Content Provider in CamiApp for Android fails to restrict access permissions

Overview The Content Provider in CamiApp for Android provided by KOKUYO S Co.,Ltd. contains an issue where access permissions are not restricted. Hiroshi Kumagai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

JVN#55438786: Content Provider in CamiApp for Android fails to restrict access permissions

The Content Provider in CamiApp for Android provided by KOKUYO S&T Co.,Ltd. contains an issue where access permissions are not restricted. Impact If a user of the affected product uses another malicious Android application, information stored in the database may be obtained or altered. Solution...

File Explorer (FX) For Android Path Traversal

Disclosure Date: 31 Jan 2014 Author: Keith Makan http://blog.k3170makan.com Vendor or Software Link: https://play.google.com/store/apps/details?id=nextapp.fx&hl=en Version: 2.3.0.10 Tested on: Android 3.2.1 Site : http://blog.k3170makan.com Description: File Explorer FX for Android Suffers from a...

CVE-2013-2318

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application...

Authorization

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application...

CVE-2013-2318

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application...

Content Provider in MovatwiTouch fails to restrict access permissions

Overview MovatwiTouch is a Twitter client software for Android devices. The Content Provider in MovatwiTouch contains an issue where access permissions are not restricted. Masata Nishida of Advanced Research Laboratory, SecureBrain Corporation reported this vulnerability to IPA. JPCERT/CC...