QKSMS - Open Source SMS & MMS - Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application QKSMS - Open Source SMS & MMS published at the 'play' market has multiple vulnerabilities...

GO SMS Pro - Dangerous filesystem permissions, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application GO SMS Pro published at the 'play' market has multiple vulnerabilities...

AwSMS [BETA] - Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application AwSMS BETA published at the 'play' market has multiple vulnerabilities...

SMS+ (with Lock, Emoji, Spam) - Customized SSL, Hardcoded secrets, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SMS+ with Lock, Emoji, Spam published at the 'play' market has multiple vulnerabilities...

EvolveSMS (Text Messaging) - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application EvolveSMS Text Messaging published at the 'play' market has multiple vulnerabilities...

YAATA SMS - Customized SSL, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application YAATA SMS published at the 'play' market has multiple vulnerabilities...

Candyland GO SMS - Dangerous filesystem permissions, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Candyland GO SMS published at the 'play' market has multiple vulnerabilities...

Hardcoded credentials

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page...

Hardcoded credentials

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

Hardcoded credentials

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML pag...

Hardcoded credentials

Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

اینستا فارسی - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application اینستا فارسی published at the 'play' market has multiple vulnerabilities...

CVE-2016-8567

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

Hardcoded credentials

An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...

Hardcoded credentials

An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication...

Hardcoded credentials

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

CVE-2016-9353

An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The admin password is stored in the system and is encrypted with a static key hard-coded in the program. Attackers could reverse the admin account password for use...

Hardcoded credentials

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

CVE-2016-8491

The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell...

CVE-2016-8491

CVE-2016-8491 affects Fortinet FortiWLC: presence of a hardcoded account named 'core' that allows attackers to gain unauthorized read/write access via a remote shell. This is evidenced across multiple sources (Fortinet advisory FG-IR-16-065 and various CVE/NVD records) describing a hardcoded core...