Using the CTS for vulnerability detection and principles of analysis-vulnerability warning-the black bar safety net

360 Vulpecker team Membership 360 Information Security Department, committed to the Android application and the system-layer vulnerability discovery as well as other Android security research. We passed on the CTS frame of the research, the preparation of a vulnerability detection aspect of the...

Wawa Employees Credit Union Mobile Information Disclosure Vulnerability

Wawa Employees Credit Union Mobile allows you to bank anywhere, anytime. Wawa Employees Credit Union Mobile for iOS fails to validate SSL servers with X.509 certificates, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by crafting certificates...

Avira Mobile Security for iOS Information Disclosure Vulnerability

Avira Mobile Security for iOS is a set of mobile security software based on the iOS platform from Avira Germany. An information disclosure vulnerability exists in iOS-based versions of Avira Mobile Security prior to 1.5.11, which originates when the program sends sensitive login information in...

Design/Logic Flaw

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

CVE-2015-7732 affects Avira Mobile Security for iOS prior to 1.5.11. The vulnerability is an information disclosure where the app sends sensitive login information in cleartext, potentially exposing credentials. Multiple connected sources corroborate the issue and identify the impacted version ra...

Mobile Security & Antivirus - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...

Decade Long Partnership = Global Partner Innovation Award

Here at Trend Micro we highly value the relationships we’ve build with our partners, especially those that have spanned several years. However, it’s particularly gratifying when those partners choose to recognize our work with an award. So, excuse us while we toot our own horn’s for a bit...

Radio Javan app for iOS authentication vulnerability

Radio Javan app for iOS is an iOS-based audio playback application from Radio Javan. An authentication vulnerability exists in versions 9.3.4 through 9.6.1 of the Radio Javan app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. An...

Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability

Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

Code injection

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

The CVE describes a flaw in Panda Mobile Security for iOS 1.1 where the app accepts invalid/self-signed TLS certificates, enabling a man-in-the-middle to silently intercept data during the login API call. The connected CNVD/CNVD-related entries corroborate the same vulnerable behavior, focusing o...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

Google Android Qualcomm has an unspecified vulnerability (CNVD-2017-06759)

Android is a cell phone operating system based on the Linux open kernel. Google Android Qualcomm has a security vulnerability that allows attackers to perform security attacks...

Mobile Security Framework: MobSF

Mobile Security Framework is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We’ve been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test and...

Zimperium Publishes Exploits for Patched Android Bugs

Exploits for two patched Android privilege escalation vulnerabilities were published today by security company Zimperium. These are the first publicly released submissions from its N-Days Exploit Acquisition Program, which began in February and had among its stated goals to encourage researchers ...

Apple iOS webkit address bar forgery vulnerability

Apple iOS is an operating system for Apple smart devices. A spoofing vulnerability exists in the address bar of the Webkit user interface used by Apple iOS, which allows an attacker to construct malicious links and trick users into clicking on them, which can spoof the address bar...