osu!droid - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application osu!droid published at the 'play' market has multiple vulnerabilities...

Droid Optimizer - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Droid Optimizer published at the 'play' market has multiple vulnerabilities...

QR Droid Private™ - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application QR Droid Private™ published at the 'play' market has multiple vulnerabilities...

QR Droid Code Scanner - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application QR Droid Code Scanner published at the 'play' market has multiple vulnerabilities...

Cheat Droid ★ root only - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cheat Droid ★ root only published at the 'play' market has multiple vulnerabilities...

Scheme Droid - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Scheme Droid published at the 'play' market has multiple vulnerabilities...

BB-8™ App Enabled Droid - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application BB-8™ App Enabled Droid published at the 'play' market has multiple vulnerabilities...

Let's Print Droid - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Let's Print Droid published at the 'play' market has multiple vulnerabilities...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

CVE-2014-7573

The droid Survey Offline Forms aka com.contact.droidSURVEY application 2.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7573

The CVE-2014-7573 entry concerns the Android app “droid Survey Offline Forms” (com.contact.droidSURVEY) version 2.5.2, which fails to verify X.509 certificates from SSL servers. This misimplementation enables man-in-the-middle attackers to spoof the server and exfiltrate sensitive data via a craf...

CVE-2013-4622

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

Design/Logic Flaw

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2013-4622

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2013-4622

The CVE-2013-4622 entry concerns the HTC Droid Incredible 3G Mobile Hotspot feature, where the device ships with a default WPA2 PSK of 1234567890. The underlying issue is the predictable default passphrase, which can allow a remote attacker within WLAN range to gain access to the hotspot. Documen...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Unfixed XSS vulnerability at www.seoulsemicon.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.seoulsemicon.co.kr, which at the time of submission ranked 3265759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

Unfixed XSS vulnerability at www.aboki.net

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.aboki.net, which at the time of submission ranked 246325 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Unfixed XSS vulnerability at www.internetdisk.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.internetdisk.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is current...