CVE-2017-3134

CVE-2017-3134 affects Fortinet FortiWLC-SD versions 8.2.4 and earlier. The issue is a privilege-escalation flaw where an attacker with admin/superuser privileges can gain shell/root access via the CLI command ‘copy running-config’, attributed to lack of input sanitisation for that command. Connec...

BalkaniYUmTVzaTelefonHttp - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application BalkaniYUmTVzaTelefonHttp published at the 'play' market has multiple vulnerabilities...

KeePassDroid - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application KeePassDroid published at the 'play' market has multiple vulnerabilities...

Other SD Projects Knowledge Base are accessible through direct link

h3. Summary: If a Customer only able to access one SD Portal and log in to Confluence, it is actually possible for that Customer to access other SD Project KBs through a Direct URL Link including navigating the space. h3. Steps to Reproduce: Prepare a JIRA instance that is connected to Confluence...

Other SD Projects Knowledge Base are accessible through direct link

h3. Summary: If a Customer only able to access one SD Portal and log in to Confluence, it is actually possible for that Customer to access other SD Project KBs through a Direct URL Link including navigating the space. h3. Steps to Reproduce: Prepare a JIRA instance that is connected to Confluence...

Giniko Afghan TV - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Giniko Afghan TV published at the 'play' market has multiple vulnerabilities...

Fortinet FortiWLC-SD Elevation of Privilege Vulnerability

Fortinet FortiWLC-SD is an unlimited router product from Fortinet. An elevation of privilege vulnerability exists in Fortinet FortiWLC-SD. An attacker can exploit this vulnerability to gain root privileges...

CVE-2017-2162

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser...

Authentication flaw

The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II...

CVE-2016-4863

CVE-2016-4863 concerns Toshiba FlashAir cards (SD-WD/WC class 6; SD-WD/WC class 10 W-02; WE-class W-03; FlashAir II/III W-02/W-03 series) where enabling Internet pass-thru Mode allows authenticationless connections from the STA LAN. The root cause is that the device does not require authenticatio...

İzsu Genel Müdürlüğü - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application İzsu Genel Müdürlüğü published at the 'play' market has multiple vulnerabilities...

Instant Likes - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Instant Likes published at the 'play' market has multiple vulnerabilities...

CVE-2017-8769

Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect...

CVE-2017-8769

Facebook WhatsApp Messenger for Android prior to 2.16.323 stores files associated with chats (Audio, Documents, Images, Video, Voice Notes) on the SD card in cleartext, and this persists after the chat is deleted. The root cause described is that files are kept in cleartext on external storage de...

Maschseefest Hannover - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Maschseefest Hannover published at the 'play' market has multiple vulnerabilities...

2D to 3D - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application 2D to 3D published at the 'play' market has multiple vulnerabilities...

binaxDemo - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application binaxDemo published at the 'play' market has multiple vulnerabilities...

Simple Recharge - Multi Topup - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Simple Recharge - Multi Topup published at the 'play' market has multiple vulnerabilities...

Rapid Recharge - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Rapid Recharge published at the 'play' market has multiple vulnerabilities...

Симулятор Дружко | Шар Судьбы - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Симулятор Дружко | Шар Судьбы published at the 'play' market has multiple vulnerabilities...