The vulnerability of the mobile application MSM for the Android operating system allows a hacker to trigger a device restart.

The vulnerability of the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a device reboot after a kernel failure. This occurs because when the object associated with the codec is...

Cloud tip high school entrance examination Ali cloud OSS credentials have information leakage vulnerability

Cloudtip Higher Education App is a study software for high school students. There is an information leakage vulnerability in the Aliyun OSS credentials of CloudTip Higher Education. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret,...

This App Lets Anyone with Limited Skills Create Android Ransomware

By Uzair Amir We now have a Mobile App that Helps Cybercriminals Develop This is a post from HackRead.com Read the original post: This App Lets Anyone with Limited Skills Create Android Ransomware...

Lychee Live AliCloud OSS credentials have information leakage vulnerability

Lychee Live app is an Internet-based interactive live broadcasting platform launched by Guangdong Network Radio and Television. There is an information leakage vulnerability in Lychee Live Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

Orange Aliyun OSS credentials suffer from information leakage vulnerability

Orange APP is an erotic community app. AliCloud Object Storage ServiceObject Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by AliCloud to the public. There is an information leakage vulnerability in the Orange Aliyun OSS credentials. Th...

Personality.com App AliCloud OSS Credentials Exist Information Leakage Vulnerability

Personality.com App is a mobile application tailored for young people. Personality.com App AliCloud OSS credentials have information leakage vulnerability. The vulnerability is caused by credential leakage due to the built-in accessKeyId and accessKeySecret in the mobile app when using the SDK. A...

Information leakage vulnerability in Aliyun OSS credentials in Higher Education State

CollegeBang is dedicated to providing online courses, and course production services for colleges and universities around the world. Aliyun Object Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by Aliyun. There is an information leakage...

Amusing phone call AliCloud OSS credentials have information leakage vulnerability

Amusing Phone is a communication APP that combines entertainment and security, developed and launched by Beijing Shusheng Mobile Technology Co. There is an information leakage vulnerability in the AliCloud OSS credentials of Tease Phone. The vulnerability is caused by credential leakage due to th...

Yeah Classroom AliCloud OSS credentials have an information leakage vulnerability

Yeah Classroom is an online interactive learning and communication platform that focuses on vocational skills education. There is an information leakage vulnerability in the AliCloud OSS credentials of Yeah Classroom. The vulnerability is caused by credential leakage due to the use of SDK with...

Ate little brother ali cloud oss credentials have information leakage vulnerability

The Aite Little Brother app is a service program. There is an information leakage vulnerability in the Aite Little Brother AliCloud oss credentials. The vulnerability stems from the accessKeyId and accessKeySecret, endpoint built into the mobile app, resulting in credential leakage. An attacker c...

Banco de Costa Rica BCR Movil app for iOS Man-in-the-Middle Attack Vulnerability

Banco de Costa Rica BCR Movil app for iOS is a mobile app for iOS from Banco de Costa Rica with quick access to manage your bank account, manage your balances, pay bills and send money. A security vulnerability exists in version 3.7 of the Banco de Costa Rica BCR Movil app for iOS-based platforms...

Baby Grid AliCloud oss credentials have information leakage vulnerability

Baby Grid is a Chinese overseas direct mail B2C e-commerce company. Baby Lattice aliyun oss credentials have information leakage vulnerability. The vulnerability stems from the existence of information leakage of aliyun oss credentials, when using this SDK, the accessKeyId and accessKeySecret,...

Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS Man-in-the-Middle Attack Vulnerability

A security vulnerability in the Emirates NBD Bank P.J.S.C Emirates NBD KSA app for iOS-based platforms versions 3.10.0 to 3.10.4 UAE and versions 2.0.1 to 2.1.0 KSA stems from the program's failure to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be...

Free Mobile Recharge & Coupons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Mobile Recharge & Coupons published at the 'play' market has multiple vulnerabilities...

Zomato: Login to any account with the emailaddress

Introduction An attacker just needs to supply an email address to gain a valid access token for the Zomato applications. Thus any account on Zomato can be fully accessed with just the email address. Endpoint /v2/auth.json Impact Critical, without any user interaction an attacker can access any...

AliSuppliers Mobile App - Certificates or keys found, ContentProvider mode not defined, Corrupted files vulnerabilities

HackApp vulnerability scanner discovered that application AliSuppliers Mobile App published at the 'play' market has multiple vulnerabilities...

FAQ: XenMobile Derived Credentials

What are Derived Credentials? Derived credentials provide strong authentication for mobile devices. The credentials, derived from a smart card, reside in a mobile device instead of the card. The smart card is either a Personal Identity Verification PIV card or Common Access Card CAC. The derived...

CVE-2017-9586

The "FSBY Mobile Banking" by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9601

The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9577

The "First Citizens Bank-Mobile Banking" by First Citizens Bank AL app 3.0.0 -- aka first-citizens-bank-mobile-banking/id566037101 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...