New Relic: Password disclosure during signup process

New relic provides user's the option to register new accounts. It was observed that during creation of new account process, user's password is displayed in clear text in response. This leads to disclosure of passwords. There may be another issue here that user's passwords are not stored in hashed...

New Relic: Open redirection bypass

Hello, 123172 is fixed even i found another bypass of open redirection protection at this endpoint. First get logged in and then open following URL : https://login.newrelic.com/login?returnto=///attacker.com You will be redirected on http://attacker.com Bes regards, Shailesh...

Chinese New Year - For Kids - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Chinese New Year - For Kids published at the 'play' market has multiple vulnerabilities...

New PLL Guess Words - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application New PLL Guess Words published at the 'play' market has multiple vulnerabilities...

Sketch Once Upon Time New - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Sketch Once Upon Time New published at the 'play' market has multiple vulnerabilities...

New Star Soccer - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Star Soccer published at the 'play' market has multiple vulnerabilities...

New York City Bus Simulator - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New York City Bus Simulator published at the 'play' market has multiple vulnerabilities...

Bus Simulator 2015 New York - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bus Simulator 2015 New York published at the 'play' market has multiple vulnerabilities...

New Year Winter Party Girl - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year Winter Party Girl published at the 'play' market has multiple vulnerabilities...

Design Decorate New House - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Design Decorate New House published at the 'play' market has multiple vulnerabilities...

Chinese Food - Lunar New Year! - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chinese Food - Lunar New Year! published at the 'play' market has multiple vulnerabilities...

New Mexico Crime City - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application New Mexico Crime City published at the 'play' market has multiple vulnerabilities...

Fireworks Bang New Year - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Fireworks Bang New Year published at the 'play' market has multiple vulnerabilities...

New Year Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Live Wallpaper published at the 'play' market has multiple vulnerabilities...

New Year Fireworks LWP 2016 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year Fireworks LWP 2016 published at the 'play' market has multiple vulnerabilities...

Essential New Zealand Travel - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Essential New Zealand Travel published at the 'play' market has multiple vulnerabilities...

New York Travel Guide - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New York Travel Guide published at the 'play' market has multiple vulnerabilities...

New York Pass - Travel Guide - ContentProvider mode not defined, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application New York Pass - Travel Guide published at the 'play' market has multiple vulnerabilities...

New York Metro Map - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application New York Metro Map published at the 'play' market has multiple vulnerabilities...

New York MTA Subway Map (NYC) - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New York MTA Subway Map NYC published at the 'play' market has multiple vulnerabilities...