Calendar Widget: Month - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget: Month published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...

zomato.com XSS vulnerability

Vulnerable URL: https://www.zomato.com/widgets/urbanspoonmigratedwidgets.php?case=olikeitresid=17467370"'/;a=eval;b=alert;ab/XSSPOSED/;...

URL Widget - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application URL Widget published at the 'play' market has multiple vulnerabilities...

meteo.be XSS vulnerability

Vulnerable URL: http://www.meteo.be/services/widget/?postcode=1180famfp"prpkn=2=10〈=fr Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18134 VIP website status:| Yes Check meteo.be...

Wordpress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion

No description provided by source...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the RenderWidgetHostImpl::Destroy function located in the content/browser/rendererhost/renderwidgethostimpl.cc file of the Google Chrome browser’s Navigation implementation is related to the use of memory after it is released. Exploiting this vulnerability could allow a remot...

Flashlight Widget - Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Flashlight Widget published at the 'play' market has multiple vulnerabilities...

Battery Widget (Charge Level) - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Battery Widget Charge Level published at the 'play' market has multiple vulnerabilities...

Calendar Widget Month + Agenda - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget Month + Agenda published at the 'play' market has multiple vulnerabilities...

Digital Clock Widget Xperia - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Digital Clock Widget Xperia published at the 'play' market has multiple vulnerabilities...

Calendar Widget: Month+Agenda - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget: Month+Agenda published at the 'play' market has multiple vulnerabilities...

Amber Weather Widget - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Amber Weather Widget published at the 'play' market has multiple vulnerabilities...

Weather & Clock Widget Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather & Clock Widget Android published at the 'play' market has multiple vulnerabilities...

Neon Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Neon Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Awesome Weather Clock Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Awesome Weather Clock Widget published at the 'play' market has multiple vulnerabilities...

Lockscreen Weather Widget - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Lockscreen Weather Widget published at the 'play' market has multiple vulnerabilities...

Rose Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Rose Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Dessert Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Dessert Style Weather Widget published at the 'play' market has multiple vulnerabilities...