Cybersecurity researchers have discovered vulnerabilities in the backend systems that feed content and advertising to smartphone applications.