SSHDroid - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SSHDroid published at the 'play' market has multiple vulnerabilities...

AVPlayer Plus - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application AVPlayer Plus published at the 'play' market has multiple vulnerabilities...

Euro TV Live Europe Television - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Euro TV Live Europe Television published at the 'play' market has multiple vulnerabilities...

PTV Sports Cricket Station - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application PTV Sports Cricket Station published at the 'play' market has multiple vulnerabilities...

sport TV Live - Television - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application sport TV Live - Television published at the 'play' market has multiple vulnerabilities...

MyMoney. Expense Manager - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MyMoney. Expense Manager published at the 'play' market has multiple vulnerabilities...

Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries

Overview Hanako and multiple software suites containing Hanako provided by JustSystems Corporation contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Eiji James Yoshida of Security Professionals Network Inc. reported this vulnerability to IPA...

openSUSE Security Update : dracut (openSUSE-2017-482)

This update for dracut fixes the following issues : Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc10083...

Fake SMS - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Fake SMS published at the 'play' market has multiple vulnerabilities...

PT-2017-2870

Name of the Vulnerable Software and Affected Versions Tablib version 0.11.4 Description The issue is related to the Databook loading functionality in Tablib, where a yaml loaded Databook can execute arbitrary python commands, resulting in command execution. This is due to the lack of input data...

exyuTV - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application exyuTV published at the 'play' market has multiple vulnerabilities...

Microsoft Windows .NET Framework Remote Code Execution Vulnerability

NET Framework is a software framework developed by Microsoft. A remote code execution vulnerability exists when Microsoft .NET Framework does not properly validate input before loading libraries. An attacker could take control of an affected system by exploiting this vulnerability...

Baidu Browser suffers from dll hijacking vulnerability

Baidu Browser is a browser. Baidu Browser suffers from a dll hijacking vulnerability, which is caused by the baidubrowser.exe component in Baidu Browser loading library files insecurely, which can be exploited by constructing a malicious application and placing it in a specific path to maliciousl...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014983)

This host is missing a critical security update according to Microsoft Security Updates KB4014983 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Microsoft OneNote DLL Loading RCE Vulnerability (KB2589382)

This host is missing an important security update for Microsoft OneNote according to Microsoft security update KB2589382. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-3012

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in the OCR plugin...

CVE-2017-0197

Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."...

CVE-2017-3013

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in a DLL related to remote logging...

Design/Logic Flaw

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading DLL hijacking vulnerability in the OCR plugin...

Code injection

Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office DLL Loading Vulnerability."...