Moniusoft Calendar - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Moniusoft Calendar published at the 'play' market has multiple vulnerabilities...

Photo Editor By Pavan - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor By Pavan published at the 'play' market has multiple vulnerabilities...

LAUSITZER RUNDSCHAU - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application LAUSITZER RUNDSCHAU published at the 'play' market has multiple vulnerabilities...

Converter - Video to MP3 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Converter - Video to MP3 published at the 'play' market has multiple vulnerabilities...

Theke - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Theke published at the 'play' market has multiple vulnerabilities...

Just DIY - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Just DIY published at the 'play' market has multiple vulnerabilities...

Müllmann - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Müllmann published at the 'play' market has multiple vulnerabilities...

Guía para Windows 10 - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Guía para Windows 10 published at the 'play' market has multiple vulnerabilities...

Trading 212 Forex & Stocks - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Trading 212 Forex & Stocks published at the 'play' market has multiple vulnerabilities...

Elite HD - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elite HD published at the 'play' market has multiple vulnerabilities...

مترجم عربي ألماني ناطق صوتي - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application مترجم عربي ألماني ناطق صوتي published at the 'play' market has multiple vulnerabilities...

ocloud for owncloud - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application ocloud for owncloud published at the 'play' market has multiple vulnerabilities...

Comics Camera - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Comics Camera published at the 'play' market has multiple vulnerabilities...

Business Card Maker - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Business Card Maker published at the 'play' market has multiple vulnerabilities...

Wiki Guide for CoC - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wiki Guide for CoC published at the 'play' market has multiple vulnerabilities...

PHP 5.5.33 - Invalid Memory Write

Exploit Title: Invalid memory write in phar on filename with \0 in name Date: 2016-03-19 Exploit Author: @vah13 Vendor Homepage: https://secure.php.net/ Software Link: https://github.com/php/php-src Version: 5.5.33 Tested on: Linux Test script: --------------- cat test.php ------------------- ';...

X (Formerly Twitter): XSS using javascript:alert(8007)

I want to report a xss bug. On apps.twitter.com I logged in and start with new app. In new app there is a feild: website: where user has to gave website of app. I just put javascript:alert8007 pay load and popup appears...

Wireshark - dissect_pktc_rekey Heap Based Out-of-Bounds Read

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=754 The following crash due to a heap-based out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark...

HackerOne: SECURITY: Referencing previous Reports attachment_IDs on new Reports via Draft_Sync DELETES Attachments

Issue New HackerOne exciting addition is the ability to include inline images by using their referenceID, which is in this case Fxxxxx. The reference ID is bind to the its report ContextID and cant be referenced by others unique reference Is seems that if the referenceID is used in another newest...

Microsoft Internet Explorer - Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout (MS16-023)

Microsoft Internet Explorer - Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout MS16-023 :before content:countercounter-0 close-quote url?; column-count:1; position:fixed; k ChildEBP RetAddr 0c2c9688 60ca029e MSHTML!Layout::LayoutBuilderDriver::BuildPageLayout+0x6f2093 0c2c974c...