Geo Tracker - GPS tracker - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Geo Tracker - GPS tracker published at the 'play' market has multiple vulnerabilities...

GPS Logger - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application GPS Logger published at the 'play' market has multiple vulnerabilities...

Security research team released 8 Apple iOS security vulnerability: hackers can easily attack-vulnerability warning-the black bar safety net

According to foreign media ZDNet reports, the Israeli mobile security company Zimperium recently released 8 Apple iOS system vulnerabilities, hackers can exploit these vulnerabilities to completely control the user's iOS device, so as to obtain the device's GPS data, photos, and contact...

Hackers Could Easily Take Remote Control of Your Segway Hoverboards

If you are hoverboard rider, you should be concerned about yourself. Thomas Kilbride, a security researcher from security firm IOActive, have discovered several critical vulnerabilities in Segway Ninebot miniPRO that could be exploited by hackers to remotely take "full control" over the hoverboar...

FBI Releases Article on Privacy Risks Associated with Internet-Connected Children's Toys

The Federal Bureau of Investigation FBI has released an article on the privacy risks associated with Internet-connected children's toys. FBI warns that Internet-connected toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities - including speech...

The vulnerability of the GPS component of the Android operating system allows a intruder to trigger a service failure (suspension of GPS signal detection).

The vulnerability of the Android operating system’s GPS component is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause a service failure a suspension of GPS signal detection, by using incorrect xtra.bin or xtra2.bin files on the Qualcomm...

Mock GPS with joystick - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mock GPS with joystick published at the 'play' market has multiple vulnerabilities...

Fake GPS GO Location Spoofer Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fake GPS GO Location Spoofer Free published at the 'play' market has multiple vulnerabilities...

Internet-Enabled Drill Demonstrates IoT Security Done Right

To Mark Loveless, an internet-enabled cordless drill seemed like a perfect recipe for an IoT security nightmare. Duo Security’s senior security researcher confessed that it sounded silly and quite possibly part of a push by the electronics maker to inject “smarts” into devices that ultimately...

CalAmp LMU-3030 devices may not authenticate SMS interface

Overview OBD-II devices are used to provide telematics information for managers of fleets of vehicles. One type of device, manufactured by CalAmp, has an SMS text message interface. We have found multiple deployments where no password was configured for this interface by the integrator / reseller...

Waze - GPS, Maps & Traffic - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Waze - GPS, Maps & Traffic published at the 'play' market has multiple vulnerabilities...

Car Backdoor Maker: CBM

Car Backdoor Maker For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a configuration interface that allows users ...

SQL Injection Vulnerability in Eview GPS Tracking Platform System name Parameter

Eview GPS Tracking Platform System is an online tracking system from Eview. A SQL injection vulnerability exists in the name parameter of the Eview GPS Tracking Platform System, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

Hyundai Patches Leaky Blue Link Mobile App

Hyundai Motor America has patched a vulnerability in its Blue Link mobile application that exposed personal and vehicle information to an attacker. Updated versions of the app 3.9.6 were released to Google Play and the Apple App Store on March 8, a little more than one month after Rapid7 learned...

Code injection

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code...

CVE-2016-6727

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code...

CVE-2016-6727

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code...

CVE-2016-6727

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code...

CVE-2016-6727

CVE-2016-6727 is a vulnerability described as affecting the Qualcomm GPS subsystem in Android on Android One devices, enabling remote code execution via a network-like vector. The linked records identify the issue as part of Qualcomm component vulnerabilities with a Critical impact (CVE-2016-6727...

Eview EV-07S GPS Tracker Security Bypass Vulnerability

The Eview EV-07S GPS Tracker is a GPS tracking device for personal safety and personal protection. A security vulnerability exists in the phone number of the Eview EV-07S GPS Tracker, which originates from a lack of authentication in the program. The vulnerability can be exploited to restore the...