Security Bypass Vulnerabilities in Multiple Game Engine Products

ioquake3 and others are open source, free, cross-platform Quake 3-based FPS game engines. A security vulnerability exists in the auto-downloading feature in several game engine products, which stems from the program's failure to adequately restrict content. An attacker can exploit the vulnerabili...

Fox Digital Copy (Beta) - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Fox Digital Copy Beta published at the 'play' market has multiple vulnerabilities...

RootBeer Sample - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application RootBeer Sample published at the 'play' market has multiple vulnerabilities...

Dr. Panda Restaurant Asia - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Dr. Panda Restaurant Asia published at the 'play' market has multiple vulnerabilities...

Astrill VPN - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Astrill VPN published at the 'play' market has multiple vulnerabilities...

Get Followers Fast - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers Fast published at the 'play' market has multiple vulnerabilities...

SNOOZ - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application SNOOZ published at the 'play' market has multiple vulnerabilities...

Animal Sounds - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Animal Sounds published at the 'play' market has multiple vulnerabilities...

NAEC APP - NAPP - External URLs, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application NAEC APP - NAPP published at the 'play' market has multiple vulnerabilities...

DEBIAN-CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

Adobe Illustrator Draw - External URLs, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Adobe Illustrator Draw published at the 'play' market has multiple vulnerabilities...

id Tech 3 -- remote code execution vulnerability

The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers downloading of further content and loading and executing it as native code with user credentials. This affects ioquake3, ioUrbanTerror, OpenArena, the original Quake 3 Arena and other forks...

國泰世華銀行 My MobiBank - Certificates or keys found, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application 國泰世華銀行 My MobiBank published at the 'play' market has multiple vulnerabilities...

Audi Logistik Challenge - Customized SSL, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Audi Logistik Challenge published at the 'play' market has multiple vulnerabilities...

Instant Followers Pro+ - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Followers Pro+ published at the 'play' market has multiple vulnerabilities...

Chrome: bypass for download filetype blacklist, extension->native privesc

This bug report describes a vulnerability that can be used by an extension with some permissions to escalate to native code execution on Linux desktops if Java is installed. No user interaction is required. Chrome permits extensions with appropriate permissions "downloads" and "downloads. open" t...

Pokémon Duel - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Pokémon Duel published at the 'play' market has multiple vulnerabilities...

Messaging Lite G - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Messaging Lite G published at the 'play' market has multiple vulnerabilities...

SMS and MMS Diary - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application SMS and MMS Diary published at the 'play' market has multiple vulnerabilities...