Player FM: Podcast offline! - Customized SSL, Dangerous filesystem permissions, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Player FM: Podcast offline! published at the 'play' market has multiple vulnerabilities...

Radio Online - FM Cube - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Radio Online - FM Cube published at the 'play' market has multiple vulnerabilities...

RMF FM - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RMF FM published at the 'play' market has multiple vulnerabilities...

STARE Open FM - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application STARE Open FM published at the 'play' market has multiple vulnerabilities...

Metropol FM Almanya - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Metropol FM Almanya published at the 'play' market has multiple vulnerabilities...

Wavesink DAB/FM Trial - Native code usage, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Wavesink DAB/FM Trial published at the 'play' market has multiple vulnerabilities...

myTuner Radio FM - Live Radio - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application myTuner Radio FM - Live Radio published at the 'play' market has multiple vulnerabilities...

YOU FM - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application YOU FM published at the 'play' market has multiple vulnerabilities...

Radio FM ! - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Radio FM ! published at the 'play' market has multiple vulnerabilities...

Radio FM - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Radio FM published at the 'play' market has multiple vulnerabilities...

fm.mt.com XSS vulnerability

Vulnerable URL: http://fm.mt.com/fm/en/home/search/AdvancedSearch.html?q=Humid...

mundo965.fm XSS vulnerability

Vulnerable URL: http://www.mundo965.fm/mobile/linea-caliente/noticias/locales/cuernavaca-ok/item/3884-reconoce-iebem-que-al-menos-90-maestros-corren-riesgo-de-la-entrega-de-estimulos-por-anos-de-servicio-partidos-politicos-podrian-estar-atras-del-conflicto-acusan-directivos? Details: Description|...

b2evolution 'filemanager' cross-site scripting vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution 'filemanager'. The blogs/admin.php script fails to adequately filter the 'fmfilter' parameter. A remote attacker can exploit the...

AirHopper Steals Data From Air-Gapped Computers

Air-gapped computers are generally the home of sacrosanct data. The lack of a connection between these machines and others on a network, or the Internet, means in theory that data stored on those devices is kept away from the harm of web-based threats and hackers moving laterally on a network...

AirHopper — Hacking Into an Isolated Computer Using FM Radio Signals

In order to secure sensitive information such as Finance, many companies and government agencies generally use totally secure computer systems by making sure it aren't connected to any network at all. But the most secure systems aren't safe anymore. Security researchers at the Cyber Security Labs...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7667

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7638

The Fabuestereo 88.1 FM aka com.nobexinc.wls27892411.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...