Sing! Karaoke by Smule - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sing! Karaoke by Smule published at the 'play' market has multiple vulnerabilities...

8anawat Arabic - External URLs, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 8anawat Arabic published at the 'play' market has multiple vulnerabilities...

AirWatch Inbox - Apache license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Inbox published at the 'play' market has multiple vulnerabilities...

wei.merdeka.com XSS vulnerability

Vulnerable URL: http://wei.merdeka.com/play-video?=Arrayprompt/OPENBUGBOUNTY/...

Dragon Blaze - Certificates or keys found, MIT license, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Dragon Blaze published at the 'play' market has multiple vulnerabilities...

Fast Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Download Manager published at the 'play' market has multiple vulnerabilities...

APro Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application APro Download Manager published at the 'play' market has multiple vulnerabilities...

Download Accelerator Plus - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Download Accelerator Plus published at the 'play' market has multiple vulnerabilities...

Followers for Instagram - Tags - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Followers for Instagram - Tags published at the 'play' market has multiple vulnerabilities...

Get Followers for Insta+ Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers for Insta+ Prank published at the 'play' market has multiple vulnerabilities...

Royal Free Followers for Insta - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Royal Free Followers for Insta published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

Cisco Smart Install (SMI) Protocol Misuse (cisco-sa-20170214-smi) - Unreliable Check

Cisco is aware of a significant increase in Internet scans attempting to detect devices where, after completing setup, the Smart Install feature remains enabled and without proper security controls. This could leave the involved devices susceptible to misuse of the feature. Customers who have not...

Google Touts Progress in Android Security in 2016

SAN FRANCISCO–Google has a daunting task of scanning 750 million Android devices daily for threats and checking 6 billion apps for malware each day as part of its management of 1.6 billion active Android devices. The numbers are staggering for Adrian Ludwig, director of Android Security; six year...

Google Drive - BSD license, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Google Drive published at the 'play' market has multiple vulnerabilities...

Brutal Age: Horde Invasion - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Brutal Age: Horde Invasion published at the 'play' market has multiple vulnerabilities...

Telenor banka - Customized SSL, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Telenor banka published at the 'play' market has multiple vulnerabilities...

aLogcat (free) - logcat - Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application aLogcat free - logcat published at the 'play' market has multiple vulnerabilities...

Telmex Infinitum Mail - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Telmex Infinitum Mail published at the 'play' market has multiple vulnerabilities...

Android Security Bulletin—February 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Google devices through an over-the-air OTA update. The Google device firmware images have also been released to the Google Developer...