TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.7K subscribers
Post #1656 6.41K
Basecamp for Android app allowed to trigger Javascript interface via WebView that would then provide access to Java native code (Bounty - $1,210)
https://hackerone.com/reports/1343300
HackerOne Basecamp disclosed on HackerOne: com.basecamp.bc3 Webview... It was identified that the android **com.basecamp.bc3 application**, contains a Webview where the loaded URLs are not sanitised properly. As this webview's functionality is extended via javascript...
  • 👍 8
Open in Telegram All posts from @androidmalware
More from @androidmalware
  1. Oct 16, 2026Full Android kernel exploit chain built on CVE-2023-20938, a use-after-free in Binder, on…
  2. Oct 15, 2026LEAD: LLM-Based Static Analysis of Session Hijacking Vulnerabilities in Android Deep Links…
  3. Oct 14, 2026Hirudo: From Fake Updates to Patched Banking Apps https://www.threatfabric.com/blogs/hirud…
  4. Oct 14, 2026How I Took Down a ₹1.2Cr Android Banking Fraud https://medium.com/@im404/how-i-took-down-a…
  5. Oct 12, 2026The phone was compromised before the user turned it on: the rise of Midnight Mimosa https:…
  6. Oct 7, 2026CVE-2026-23866: Finding a Whatsapp NDay https://numb3rs.re/posts/cve-2026-23866-finding-a-…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →