Ninja Rush - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ninja Rush published at the 'play' market has multiple vulnerabilities...

Super Ski Jump - Winter Rush - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Super Ski Jump - Winter Rush published at the 'play' market has multiple vulnerabilities...

Dungeon Rush: Evolved - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Dungeon Rush: Evolved published at the 'play' market has multiple vulnerabilities...

Rush of Heroes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rush of Heroes published at the 'play' market has multiple vulnerabilities...

Iron Robot Rush -Transformers - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Iron Robot Rush -Transformers published at the 'play' market has multiple vulnerabilities...

Daytona Rush - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Daytona Rush published at the 'play' market has multiple vulnerabilities...

Hill Racing 3D: Uphill Rush - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hill Racing 3D: Uphill Rush published at the 'play' market has multiple vulnerabilities...

Mega Rush - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mega Rush published at the 'play' market has multiple vulnerabilities...

Slots Vegas Rush - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Vegas Rush published at the 'play' market has multiple vulnerabilities...

Bingo Rush 2 - Dangerous filesystem permissions, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bingo Rush 2 published at the 'play' market has multiple vulnerabilities...

Triangle Rush - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Triangle Rush published at the 'play' market has multiple vulnerabilities...

3D Rollercoaster Rush NewYork - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 3D Rollercoaster Rush NewYork published at the 'play' market has multiple vulnerabilities...

Rail Rush - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Rail Rush published at the 'play' market has multiple vulnerabilities...

Westbound: Gold Rush - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Westbound: Gold Rush published at the 'play' market has multiple vulnerabilities...

Uber: Open redirect on rush.uber.com, business.uber.com, and help.uber.com

@4lemon reported open redirects on rush.uber.com, business.uber.com, and help.uber.com which would have made it possible for an attacker to redirect a victim through to another arbitrary site without user interaction...

Uber: Full path disclosure on track.uber.com

The page at track.uber.com had verbose stack traces enabled, allowing an attacker to learn information about the libraries, technologies and system information used in Uber Rush. Thanks, @firs0v!...

How I Got Here: Marcus Ranum

​Dennis Fisher talks with security pioneer Marcus Ranum about writing an early Internet firewall at DEC, the security gold-rush era of the 1990s and early 2000s, why he never patented most of the ideas he has come up with and how he found peace of mind. Download: 17ranum.mp3 Music by Chris Gonsal...

CVE-2014-6895

The Throne Rush aka com.progrestar.bft application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Throne Rush aka com.progrestar.bft application 2.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6895

The CVE-2014-6895 entry affects the Android app Throne Rush (package com.progrestar.bft) version 2.3.10. The issue is that the application does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...