CVE-2017-4915: Incorrect Authorization

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine...

İzsu Genel Müdürlüğü - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application İzsu Genel Müdürlüğü published at the 'play' market has multiple vulnerabilities...

Telewebion - Dangerous filesystem permissions, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Telewebion published at the 'play' market has multiple vulnerabilities...

iPMAX TV - Live TV - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application iPMAX TV - Live TV published at the 'play' market has multiple vulnerabilities...

9000 likes : Pro Fb Liker tips - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application 9000 likes : Pro Fb Liker tips published at the 'play' market has multiple vulnerabilities...

The installer of Empirical Project Monitor - eXtended may insecurely load Dynamic Link Libraries

Overview The installer of Empirical Project Monitor - eXtended provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Eili Masami of Tachibana Lab. reported this vulnerability to IPA...

Maschseefest Hannover - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Maschseefest Hannover published at the 'play' market has multiple vulnerabilities...

VMSA-2017-0009:VMware Workstation update addresses multiple security issues

VMSA-2017-0009 VMware Workstation update addresses multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0009 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Workstation update addresses multiple security issues...

CVE-2015-8999: Improper Restriction of Operations within the Bounds of a Memory Buffer

In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file...

PT-2017-15434

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description The issue involves the Speech Framework component and allows attackers to conduct sandbox-escape attacks via a crafted app. It is related to the speechsynthesisd Unsigned Dylib Loading Privilege...

Simple Recharge - Multi Topup - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Simple Recharge - Multi Topup published at the 'play' market has multiple vulnerabilities...

PrimeDrive Desktop Application Installer may insecurely load executable files

Overview PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application contains an issue with the file search path, which may insecurely load executable files CWE-427. Eili Masami of...

JVN#16248227: PrimeDrive Desktop Application Installer may insecurely load executable files

PrimeDrive Desktop Application is the client application for PrimeDrive online storage service provided by SoftBank Corp. The installer of PrimeDrive Desktop Application contains an issue with the file search path, which may insecurely load executable files CWE-427. Impact Arbitrary code may be...

MaxTV MK - Certificates or keys found, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application MaxTV MK published at the 'play' market has multiple vulnerabilities...

e-kWh - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application e-kWh published at the 'play' market has multiple vulnerabilities...

OpenJDK: untrusted extension directories search path in Launcher (JCE, 8163528)

An untrusted library search path flaw was found in the JCE component of OpenJDK. A local attacker could possibly use this flaw to cause a Java application using JCE to load an attacker-controlled library and hence escalate their privileges...

Crystal TV+ - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Crystal TV+ published at the 'play' market has multiple vulnerabilities...

AntikTV GO - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application AntikTV GO published at the 'play' market has multiple vulnerabilities...

CVE-2017-6051: Uncontrolled Search Path Element

An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...

Bentayga TSR - BSD license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bentayga TSR published at the 'play' market has multiple vulnerabilities...