Scheme Droid - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Scheme Droid published at the 'play' market has multiple vulnerabilities...

BB-8™ App Enabled Droid - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application BB-8™ App Enabled Droid published at the 'play' market has multiple vulnerabilities...

Let's Print Droid - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Let's Print Droid published at the 'play' market has multiple vulnerabilities...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

CVE-2014-7573

The droid Survey Offline Forms aka com.contact.droidSURVEY application 2.5.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7573

The CVE-2014-7573 entry concerns the Android app “droid Survey Offline Forms” (com.contact.droidSURVEY) version 2.5.2, which fails to verify X.509 certificates from SSL servers. This misimplementation enables man-in-the-middle attackers to spoof the server and exfiltrate sensitive data via a craf...

CVE-2013-4622

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

Design/Logic Flaw

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2013-4622

The CVE-2013-4622 entry concerns the HTC Droid Incredible 3G Mobile Hotspot feature, where the device ships with a default WPA2 PSK of 1234567890. The underlying issue is the predictable default passphrase, which can allow a remote attacker within WLAN range to gain access to the hotspot. Documen...

CVE-2013-4622

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Unfixed XSS vulnerability at www.internetdisk.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.internetdisk.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is current...

Unfixed XSS vulnerability at www.aboki.net

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.aboki.net, which at the time of submission ranked 246325 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Unfixed XSS vulnerability at www.seoulsemicon.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.seoulsemicon.co.kr, which at the time of submission ranked 3265759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

Mobile Madness

Admit it. It would scarcely break your heart if the legions of slack-jawed smartphone Facebook and FourSquare gawkers were forced to confront their own digital mortality – however briefly – with a few scary exploits made just for them. In 2011, the untethered among us saw several mobile security...

Unfixed XSS vulnerability at dl-millennium.postech.ac.kr

Security researcher Droid, has submitted on 04/08/2011 a cross-site-scripting XSS vulnerability affecting dl-millennium.postech.ac.kr, which at the time of submission ranked 106484 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It ...

Unfixed XSS vulnerability at www.buynhhouses.com

Security researcher Droid, has submitted on 04/08/2011 a cross-site-scripting XSS vulnerability affecting www.buynhhouses.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Nmap for Android Phones !!

droidmap is an android application for root users that implements some functions of NMAP in a GUI in Android. This program comes with installer scripts for the installation of the required NMAP application that must be run to install the program to your phone. Please note that the installation...

Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit

No description provided by source. Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have...