Simple bug could lead to RCE flaw on apps built with Electron Framework

A critical remote code execution vulnerability has been discovered in the popular Electron web application framework that could allow attackers to execute malicious code on victims' computers. Electron is an open source app development framework that powers thousands of widely-used desktop...

Coinbase - Buy Bitcoin & more. Secure Wallet. - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coinbase - Buy Bitcoin & more. Secure Wallet. published at the 'play' market has multiple vulnerabilities...

GHSA-8XWG-WV7V-4VQP Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration

A vulnerability has been discovered which allows Node.js integration to be re-enabled in some Electron applications that disable it. For the application to be impacted by this vulnerability it must meet all of these conditions - Runs on Electron 1.7, 1.8, or a 2.0.0-beta - Allows execution of...

Zomato: [Zomato Android/iOS] Theft of user session

Hi, I'd like to report a bug which allows to theft user data even without installing third-party apps. Activity xml is exported, and can be accessed by browser. When any WebView in a client app, or a browser meets a zomato://etc URL it will automatically launch Zomato app. File...

WondrGo - Event discovery made easy - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WondrGo - Event discovery made easy published at the 'play' market has multiple vulnerabilities...

Eidoo - BSD license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Eidoo published at the 'play' market has multiple vulnerabilities...

Solitaire TriPeaks - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Solitaire TriPeaks published at the 'play' market has multiple vulnerabilities...

eXpimal free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application eXpimal free published at the 'play' market has multiple vulnerabilities...

Cross-domain high-risk vulnerability in WebView component for iOS platforms

WebView is an iOS control for displaying web pages, which is based on the Webkit engine and presents a web page.In addition to the properties and settings of a typical View, WebView controls can handle URL requests, page loading, rendering, and page interactions. The iOS platform WebView componen...

МТС Банк - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application МТС Банк published at the 'play' market has multiple vulnerabilities...

Cheap International Calls & Low Cost Roaming - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cheap International Calls & Low Cost Roaming published at the 'play' market has multiple vulnerabilities...

My Telekom - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Telekom published at the 'play' market has multiple vulnerabilities...

BVG FahrInfo Plus - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BVG FahrInfo Plus published at the 'play' market has multiple vulnerabilities...

Booking.com Hotels & Vacation Rentals - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Booking.com Hotels & Vacation Rentals published at the 'play' market has multiple vulnerabilities...

Android WebView Cross Domain Access Vulnerability

Android WebView web view is a control for displaying html text content on Android platform. Android WebView has a cross domain access vulnerability. The vulnerability occurs because the Android application WebView opens the file domain access, and allows the file domain to access the http domain,...

My Vodafone (AL) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Vodafone AL published at the 'play' market has multiple vulnerabilities...

biFoto - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application biFoto published at the 'play' market has multiple vulnerabilities...

Eurowings - cheap flights - Dangerous filesystem permissions, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Eurowings - cheap flights published at the 'play' market has multiple vulnerabilities...

Qapsula: doctor consultations - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Qapsula: doctor consultations published at the 'play' market has multiple vulnerabilities...

mtsTV GO - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application mtsTV GO published at the 'play' market has multiple vulnerabilities...