NoRoot Firewall - External URLs, Native code usage, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application NoRoot Firewall published at the 'play' market has multiple vulnerabilities...

WO Mic - FREE microphone - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application WO Mic - FREE microphone published at the 'play' market has multiple vulnerabilities...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update

An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 6 and Red Hat JBoss Web Server 3.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

[SECURITY] Fedora 24 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc24

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Hdfc Life 2FA - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Hdfc Life 2FA published at the 'play' market has multiple vulnerabilities...

Google Android framework elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Google Android framework elevation of privilege vulnerability (CNVD-2017-21538)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Google Android framework elevation of privilege vulnerability (CNVD-2017-21537)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Google Android framework elevation of privilege vulnerability (CNVD-2017-21536)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. The Framework in Google Android is vulnerable to a power lifting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

Google Android MediaTek Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the MediaTek networking driver is a MediaTek-developed networking driver used in it. The MediaTek networking driver in Android is vulnerable to a power lifting vulnerability...

Plants vs. Zombies™ Heroes - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Plants vs. Zombies™ Heroes published at the 'play' market has multiple vulnerabilities...

PPEE (Puppy) - Professional PE file Explorer for reversers and malware researchers

There are lots of tools out there for statically analyzing malicious binaries, but they are ordinary tools for ordinary files. Puppy is a lightweight yet strong tool for static investigation of suspicious files. A companion plugin is also provided to query the file in the well-known malware...

MEGA - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MEGA published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 25 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc25

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Telegram - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Telegram published at the 'play' market has multiple vulnerabilities...

pay.taipei - Certificates or keys found, Exported components, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application pay.taipei published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 26 Update: chromium-native_client-59.0.3071.86-1.20170607gitaac1de2.fc26

Google's "pnacl" toolchain for native client support in Chromium. Depends on their older "nacl" toolchain, packaged separately...

Native DNS Spoofer (Example)

This module provides a Rex based DNS service to resolve queries intercepted via the capture mixin. Configure STATICENTRIES to contain host-name mappings desired for spoofing using a hostsfile or space/semicolon separated entries. In the default configuration, the service operates as a normal nati...

PT-2017-19176

Name of the Vulnerable Software and Affected Versions OCaml compiler versions 4.04.0 through 4.04.1 Description The issue is related to insufficient sanitisation in the OCaml compiler, which allows external code to be executed with raised privilege in binaries marked as setuid. This can be achiev...

sharkPy - NSA Tool to Dissect, Analyze, and Interact with Network Packet Data using Wireshark and libpcap capabilities

A python module to dissect, analyze, and interact with network packet data as native Python objects using Wireshark and libpcap capabilities. sharkPy dissect modules extend and otherwise modify Wireshark's tshark. SharkPy packet injection and pcap file writing modules wrap useful libpcap...