The Challenge of Cracking Iran’s Internet Blockade

People around the world are rallying to subvert Iran's internet shutdown, but actually pulling it off is proving difficult and risky...

Hardcoded credentials

Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13102

The CVE-2017-13102 entry concerns the iOS app Asphalt Xtreme: Offroad Rally Racing (Gameloft), version 1.6.0 (2017-08-13). The root cause is the use of a hard-coded encryption key, enabling data encrypted with that key to be decrypted by anyone who has the key. This vulnerability exposes stored d...

Rally Racing 2015 - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racing 2015 published at the 'play' market has multiple vulnerabilities...

Rally Racer 3D - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racer 3D published at the 'play' market has multiple vulnerabilities...

Extreme Rally SUV Simulator 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Extreme Rally SUV Simulator 3D published at the 'play' market has multiple vulnerabilities...

Pure Gymkhana Rally - Drift ! - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Pure Gymkhana Rally - Drift ! published at the 'play' market has multiple vulnerabilities...

Rally Racer Drift - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racer Drift published at the 'play' market has multiple vulnerabilities...

Rally Racer Unlocked - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racer Unlocked published at the 'play' market has multiple vulnerabilities...

PAC-MAN Kart Rally by Namco - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PAC-MAN Kart Rally by Namco published at the 'play' market has multiple vulnerabilities...

Pocket Rally FREE2WIN - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Pocket Rally FREE2WIN published at the 'play' market has multiple vulnerabilities...

Rally Racer Dirt - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racer Dirt published at the 'play' market has multiple vulnerabilities...

Dakar Rally 2016 - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dakar Rally 2016 published at the 'play' market has multiple vulnerabilities...

Flowdock API Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Flowdock API Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1574 Vulnerability Magazine:...

CVE-2014-7725

The Rally Albania Live 2014 aka com.wRallyAlbaniaLIVE2014 application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7725

The Rally Albania Live 2014 aka com.wRallyAlbaniaLIVE2014 application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Rally Albania Live 2014 aka com.wRallyAlbaniaLIVE2014 application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7725

The CVE-2014-7725 entry concerns the Rally Albania Live 2014 Android app (com.wRallyAlbaniaLIVE2014), version 0.11, which does not verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2014-7725

The Rally Albania Live 2014 aka com.wRallyAlbaniaLIVE2014 application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Xpand Rally <= 1.0.0.0 (Server/Clients) Crash Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...