CVE-2015-8999: Improper Restriction of Operations within the Bounds of a Memory Buffer

In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file...

VMSA-2017-0009:VMware Workstation update addresses multiple security issues

VMSA-2017-0009 VMware Workstation update addresses multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0009 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Workstation update addresses multiple security issues...

PT-2017-15434

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description The issue involves the Speech Framework component and allows attackers to conduct sandbox-escape attacks via a crafted app. It is related to the speechsynthesisd Unsigned Dylib Loading Privilege...

Simple Recharge - Multi Topup - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Simple Recharge - Multi Topup published at the 'play' market has multiple vulnerabilities...

PrimeDrive Desktop Application Installer may insecurely load executable files

Overview PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application contains an issue with the file search path, which may insecurely load executable files CWE-427. Eili Masami of...

JVN#16248227: PrimeDrive Desktop Application Installer may insecurely load executable files

PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application contains an issue with the file search path, which may insecurely load executable files CWE-427. Impact Arbitrary code may be...

MaxTV MK - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application MaxTV MK published at the 'play' market has multiple vulnerabilities...

e-kWh - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application e-kWh published at the 'play' market has multiple vulnerabilities...

OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)

An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges...

Crystal TV+ - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Crystal TV+ published at the 'play' market has multiple vulnerabilities...

AntikTV GO - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application AntikTV GO published at the 'play' market has multiple vulnerabilities...

CVE-2017-6051: Uncontrolled Search Path Element

An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...

Bentayga TSR - BSD license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bentayga TSR published at the 'play' market has multiple vulnerabilities...

Flying Spur TSR - Corrupted files, Dangerous filesystem permissions, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Flying Spur TSR published at the 'play' market has multiple vulnerabilities...

Uber - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Uber published at the 'play' market has multiple vulnerabilities...

bien sports tv 2017 free - Dynamic Code Loading, External URLs, SQLite database found vulnerabilities

HackApp vulnerability scanner discovered that application bien sports tv 2017 free published at the 'play' market has multiple vulnerabilities...

Bien Sport HD TV - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Bien Sport HD TV published at the 'play' market has multiple vulnerabilities...

JVN#71572107: Installer of Vivaldi for Windows may insecurely load executable files

The installer of Vivaldi for Windows contains an issue in the file search path when loading files, which may insecurely load executable files CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest...

Aeroexpress - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Aeroexpress published at the 'play' market has multiple vulnerabilities...

Super Locker 2017 - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Super Locker 2017 published at the 'play' market has multiple vulnerabilities...