Donut - Generates X86, X64, Or AMD64+x86 Position-Independent Shellcode That Loads .NET Assemblies, PE Files, And Other Windows Payloads From Memory

Donut generates x86 or x64 shellcode from VBScript, JScript, EXE, DLL including .NET Assemblies files. This shellcode can be injected into an arbitrary Windows processes for in-memory execution. Given a supported file type, parameters and an entry point where applicable such as Program.Main, it...

Donut Recipe: Pastry Chef Kids - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Donut Recipe: Pastry Chef Kids published at the 'play' market has multiple vulnerabilities...

My Sweet Bakery - Donut Shop - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Sweet Bakery - Donut Shop published at the 'play' market has multiple vulnerabilities...

Donut Maker Deluxe - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Donut Maker Deluxe published at the 'play' market has multiple vulnerabilities...

CVE-2014-5709

The Donut Maker aka com.sunstorm.android.donut application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5709

The Donut Maker aka com.sunstorm.android.donut application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5709

CVE-2014-5709 concerns the Android app Donut Maker (com.sunstorm.android.donut) version 1.27, which fails to verify X.509 certificates from SSL servers . This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected records ind...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...