Measuring Vulnerability Rediscovery

New paper: "Taking Stock: Estimating Vulnerability Rediscovery," by Trey Herr, Bruce Schneier, and Christopher Morris: Abstract: How often do multiple, independent, parties discover the same vulnerability? There are ample models of vulnerability discovery, but little academic work on this issue o...

Baby Rhymes - by BabyTV - Base64 encoded String, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Baby Rhymes - by BabyTV published at the 'play' market has multiple vulnerabilities...

Find My Pair 3 - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Find My Pair 3 published at the 'play' market has multiple vulnerabilities...

Tynker - Learn to code - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tynker - Learn to code published at the 'play' market has multiple vulnerabilities...

Advent Story Calendar Demo - BSD license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Advent Story Calendar Demo published at the 'play' market has multiple vulnerabilities...

The Farm - Puzzles Kids Games - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application The Farm - Puzzles Kids Games published at the 'play' market has multiple vulnerabilities...

Kids Dinosaur Join the Dots - External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kids Dinosaur Join the Dots published at the 'play' market has multiple vulnerabilities...

Pool Billiards: 8 Balls - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pool Billiards: 8 Balls published at the 'play' market has multiple vulnerabilities...

Shellrazer - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Shellrazer published at the 'play' market has multiple vulnerabilities...

100 Doors 2015 Pro - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application 100 Doors 2015 Pro published at the 'play' market has multiple vulnerabilities...

Bricks Pop - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Bricks Pop published at the 'play' market has multiple vulnerabilities...

PAC-MAN Championship Ed. Demo - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PAC-MAN Championship Ed. Demo published at the 'play' market has multiple vulnerabilities...

Video & TV SideView : Remote - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video & TV SideView : Remote published at the 'play' market has multiple vulnerabilities...

A7-Nord - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application A7-Nord published at the 'play' market has multiple vulnerabilities...

HSV-Fanclub 1887 - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HSV-Fanclub 1887 published at the 'play' market has multiple vulnerabilities...

Keyboard for Samsung - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Keyboard for Samsung published at the 'play' market has multiple vulnerabilities...

Winter Cat Live Wallpaper - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Winter Cat Live Wallpaper published at the 'play' market has multiple vulnerabilities...

KATWARN - Certificates or keys found, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application KATWARN published at the 'play' market has multiple vulnerabilities...

Dosecast - Medication Reminder - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Dosecast - Medication Reminder published at the 'play' market has multiple vulnerabilities...

pzizz - deep sleep & power nap - Base64 encoded String, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application pzizz - deep sleep & power nap published at the 'play' market has multiple vulnerabilities...