Hardcoded Credentials

Insufficient URL Validation

Weak Host Validation

Arbitrary Code Execution

Intent Redirection (Access to Protected Components)

Unprotected Data URIs

Theft of Arbitrary files from LocalStorage

Using Components with Known Vulnerabilities

Insecure Broadcast Receiver

AWS Cognito Misconfiguration

Insecure use of FilePaths in FileProvider

Use of Implicit intent to send a broadcast with sensitive data

Intercepting Implicit intent to load arbitrary URL

Insecure Implementation of SetResult in exported Activity

Insecure Content Provider

Lack of SSL Certificate Validation

Insecure Webview Properties Enabled

Insecure Logging