THI-App - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application THI-App published at the 'play' market has multiple vulnerabilities...

The Walking Dead No Man's Land - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Walking Dead No Man's Land published at the 'play' market has multiple vulnerabilities...

macOS HelpViewer 10.12.1 - XSS Leads to Arbitrary File Execution and Arbitrary File Read Exploit

Google Security Research / OSX: HelpViewer XSS leads to arbitrary file execution and arbitrary file read. HelpViewer is an application and using WebView to show a help file. You can see it simply by the command: open /Applications/Safari.app/Contents/Resources/Safari.help...

macOS HelpViewer XSS leads to arbitrary file execution and arbitrary file read（CVE-2017-2361）

HelpViewer is an application and using WebView to show a help file. You can see it simply by the command: open /Applications/Safari.app/Contents/Resources/Safari.help or using "help:" scheme: help:openbook=com.apple.safari.help...

e-Control - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application e-Control published at the 'play' market has multiple vulnerabilities...

Toca Kitchen 2 - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Toca Kitchen 2 published at the 'play' market has multiple vulnerabilities...

SMS from Android 4.4 - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SMS from Android 4.4 published at the 'play' market has multiple vulnerabilities...

Schedule SMS MMS EMAIL - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Schedule SMS MMS EMAIL published at the 'play' market has multiple vulnerabilities...

Contacts + - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Contacts + published at the 'play' market has multiple vulnerabilities...

Unfollow All for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Unfollow All for Instagram published at the 'play' market has multiple vulnerabilities...

Get Followers for Instagram - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers for Instagram published at the 'play' market has multiple vulnerabilities...

Free Followers for IG - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers for IG published at the 'play' market has multiple vulnerabilities...

JioChat: Free Video Call & SMS - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application JioChat: Free Video Call & SMS published at the 'play' market has multiple vulnerabilities...

Download Manager Pro FREE - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager Pro FREE published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

BusyBox Integer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the DHCP client udhcpc in BusyBox versions prior to 1.25.0. A remote attacker can exploit this vulnerability to cause...

Microsoft OneDrive - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Microsoft OneDrive published at the 'play' market has multiple vulnerabilities...

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

OANDA fxTrade for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application OANDA fxTrade for Android published at the 'play' market has multiple vulnerabilities...

КиноПоиск - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application КиноПоиск published at the 'play' market has multiple vulnerabilities...