AndroMoney ( Expense Track ) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application AndroMoney Expense Track published at the 'play' market has multiple vulnerabilities...

MyMoney. Expense Manager - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MyMoney. Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense IQ Money Manager - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Expense IQ Money Manager published at the 'play' market has multiple vulnerabilities...

Zenmoney: expense tracker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zenmoney: expense tracker published at the 'play' market has multiple vulnerabilities...

Harvest Time & Expense Tracker - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Harvest Time & Expense Tracker published at the 'play' market has multiple vulnerabilities...

Harvest: Unauthorised read Access to Expense Receipt of any user in the company(Vertical Privilege escalation)

Hi Team, Description : In Timesheet you have option for submitting your expense for the projects you are assigned. But Only Admin can view other user's Expenses and related receipts. But there is a request which gives a full size of expense receipt attached to the expenses. This request is...

My Wallet - Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Wallet - Expense Manager published at the 'play' market has multiple vulnerabilities...

Harvest: Cross-Site Request Forgery (CSRF)

Hello, I Found Cross-Site Request Forgery CSRF while made new Category POC : just put user site and the name of the category on this HTML Form and the category will be created to this account. there is no any token to validate the request here so the attacker can use this to made a CSRF attack to...

Notilus 2012 R3 SQL Injection

Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' CWE-89 CVE Reference: NONE...

Expense Manager - Dynamic Code Loading, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

MoneyControl Expense Tracking - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MoneyControl Expense Tracking published at the 'play' market has multiple vulnerabilities...

Expensify - Expense Reports - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Expensify - Expense Reports published at the 'play' market has multiple vulnerabilities...

Financisto - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financisto - Expense Manager published at the 'play' market has multiple vulnerabilities...

CWMoney 2.0 Expense Track - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CWMoney 2.0 Expense Track published at the 'play' market has multiple vulnerabilities...

Expense Manager - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Financius - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financius - Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Expense Manager - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

Walnut: Track & Split Expenses - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Walnut: Track & Split Expenses published at the 'play' market has multiple vulnerabilities...