Ring of Fire (free) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ring of Fire free published at the 'play' market has multiple vulnerabilities...

Galaxy on Fire 2™ HD - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy on Fire 2™ HD published at the 'play' market has multiple vulnerabilities...

Amazon Fire TV Remote App - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Amazon Fire TV Remote App published at the 'play' market has multiple vulnerabilities...

Hell Fire Emoji iKeyboard - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hell Fire Emoji iKeyboard published at the 'play' market has multiple vulnerabilities...

Horse Fire Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Horse Fire Live Wallpaper published at the 'play' market has multiple vulnerabilities...

Fire Place HD - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fire Place HD published at the 'play' market has multiple vulnerabilities...

Fire Skull Theme for CM Launch - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Fire Skull Theme for CM Launch published at the 'play' market has multiple vulnerabilities...

Amazon Backtracks On Encryption Removal

Amazon reversed course on its unpopular decision to remove encryption from its Fire OS 5 tablets. Over the weekend, Amazon said, customers’ device-level encryption support will return this spring. The move comes after Amazon customers and privacy activists expressed outrage over the company’s...

Amazon Faces Backlash Over Removal Of Device Encryption

Amazon’s decision to remove encryption from its tablets running the latest Fire OS 5 release of its software has many privacy-minded tablet owners are crying foul. They are blasting Amazon for making their tablets less secure and no longer safe to store personal data from email credentials, credi...

Cisco Firepower Management Center (FMC) Detection Consolidation

Consolidation of Cisco Firepower Management Center FMC detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Xdh / LinuxNet Perlbot / fBot IRC Bot - Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Xdh / LinuxNet Perlbot / fBot IRC Bot Remote Code Execution', 'Description' = %q This module allows remote command execution on an I...

grayslakefire.com XSS vulnerability

Vulnerable URL: http://www.grayslakefire.com/cgi-bin/ureservegold.pl Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17264494 Google Pagerank| 3 VIP website status:| No Check...

PT-2015-3331

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 2016-01-15 Description The issue is related to a stack-based buffer overflow in the havok write function. This can be exploited by sending a long string to the /dev/hv device, potentially causing a denial of...

Amazon Patches Certificate Vulnerabilities in Fire Phones

Amazon last week patched three vulnerabilities in its Fire smartphones, including two in its Certinstaller package that put devices at risk. An attacker could take advantage of the vulnerability in the package, which allows mobile apps to install certificates on Amazon Fire devices without user...

Amazon Fire TV YouTube Remote Control

This module acts as a simple remote control for the Amazon Fire TV's YouTube app. Tested on the Amazon Fire TV Stick. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Amazon Fire TV YouTube Remo...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7570

The Fire Equipments Screen lock aka com.locktheworld.screen.lock.theme.FireEquipments application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7570

The CVE-2014-7570 entry concerns the Android app Fire Equipments Screen lock (com.locktheworld.screen.lock.theme.FireEquipments) v1.1. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a...

PT-2014-8101

Name of the Vulnerable Software and Affected Versions Fire Equipments Screen lock version 1.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...