Magic Glow! Draw for toddlers - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Magic Glow! Draw for toddlers published at the 'play' market has multiple vulnerabilities...

Glow Hockey 2 (Evolution) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Glow Hockey 2 Evolution published at the 'play' market has multiple vulnerabilities...

Air Hockey Glow 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Air Hockey Glow 2 published at the 'play' market has multiple vulnerabilities...

Glow Air Hockey - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Glow Air Hockey published at the 'play' market has multiple vulnerabilities...

Glow Spin Art - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Spin Art published at the 'play' market has multiple vulnerabilities...

Glow Nails: Manicure Games™ - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Nails: Manicure Games™ published at the 'play' market has multiple vulnerabilities...

Kids Glow - Doodle with Stars! - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Kids Glow - Doodle with Stars! published at the 'play' market has multiple vulnerabilities...

vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: vBshop persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 25/3/2012 9:32 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team Odyessy. Today we will release a 0day for the vBulletin mod...

CVE-2004-1827

CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...