Sonic Runners - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Sonic Runners published at the 'play' market has multiple vulnerabilities...

Sonic Racing Transformed - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Sonic Racing Transformed published at the 'play' market has multiple vulnerabilities...

Sonic 4 Episode II LITE - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sonic 4 Episode II LITE published at the 'play' market has multiple vulnerabilities...

Sonic Jump Fever - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sonic Jump Fever published at the 'play' market has multiple vulnerabilities...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5696

The Sonic 4 Episode II LITE aka com.sega.sonic4ep2lite application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5696

The CVE concerns the Android app Sonic 4 Episode II LITE (com.sega.sonic4ep2lite), version 2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Oth...

CVE-2014-5696

The Sonic 4 Episode II LITE aka com.sega.sonic4ep2lite application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5705

The CVE-2014-5705 entry concerns Sonic CD Lite (com.soa.sega.soniccdlite) app version 1.0.4 on Android, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certifica...

PG Social Networking Shell Upload Vulnerabilty

No description provided by source. ============================================================== PG Social Networking --Shell upload Vulnerabilty ============================================================== Name : PG Social Networking --Shell upload Vulnerabilty Date : july 9,2010 Critical Lev...

VbsEdit 4.7.2.0 - (.vbs) Buffer Overflow Vulnerability

No description provided by source. Title: VbsEdit v 4.7.2.0.vbs Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil special thanks : r0073r,Sid3^effects,L0rd...

Inout Ad server Ultimate Shell Upload Vulnerabilty

No description provided by source. ============================================================== Inout Ad server Ultimate -- Shell upload Vulnerabilty ============================================================== Name : Inout Ad server Ultimate Shell upload Vulnerabilty Date : july 9,2010...

Dear Jailbreaker, Apple Wants to Have a Word with You

After banning the word “jailbreak” from its app store and music library, Apple today reversed course and again permits the term – slang for hacking into a device to download unauthorized content — to appear on iTunes and its App Store. On Thursday bloggers noticed Apple had censored the word, usi...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

vBulletin 4.1.2 0-day Denial Of Service Exploit

========================================= vBulletin 4.1.2 0-day Denial Of Service Exploit ========================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 /' /' / /' 0 /, // ,/ / 1 // /' / // /' / /'...

WM Downloader 3.1.2.2 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================== WM Downloader 3.1.2.2 DLL Hijacking Exploit =========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

VbsEdit 4.7.2.0 - .vbs Buffer Overflow

VbsEdit 4.7.2.0 - .vbs Buffer Overflow Title: VbsEdit v 4.7.2.0.vbs Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil special thanks : r0073r,Sid3^effects,L0rd...

VbsEdit 4.7.2.0 - '.vbs' Buffer Overflow

Title: VbsEdit v 4.7.2.0.vbs Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil special thanks : r0073r,Sid3^effects,L0rd...