Мобильный банк УРАЛСИБ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Мобильный банк УРАЛСИБ published at the 'play' market has multiple vulnerabilities...

Ренессанс Кредит - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ренессанс Кредит published at the 'play' market has multiple vulnerabilities...

bahasa.cs.ui.ac.id XSS vulnerability

Vulnerable URL: http://bahasa.cs.ui.ac.id/kbbi/kbbi.php?keyword=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Red Hat JBoss Products RMI Java Deserialization Vulnerability (Nov 2015) - Active Check

Red Hat JBoss products are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP gettext 1.0.12 - 'gettext.php' Code Execution

CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...

CVE-2016-5386

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect a CGI...

CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...

Discontimo - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Discontimo published at the 'play' market has multiple vulnerabilities...

Castle Clash: Новая Эра - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Новая Эра published at the 'play' market has multiple vulnerabilities...

Едадил — акции в магазинах - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Едадил — акции в магазинах published at the 'play' market has multiple vulnerabilities...

Time2Work - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Time2Work published at the 'play' market has multiple vulnerabilities...

HiveTaxi - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HiveTaxi published at the 'play' market has multiple vulnerabilities...

The Void - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application The Void published at the 'play' market has multiple vulnerabilities...

Мой брокер - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Мой брокер published at the 'play' market has multiple vulnerabilities...

Arbitrary File Download Vulnerability in Creative Portal Application System

Hebei Xinhe is an IT company that can provide customers with a full range of solutions and technical services. An arbitrary file download vulnerability exists in the Creative Portal application. An attacker is allowed to download arbitrary files...

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04040)

Apache Struts is an open source framework for creating enterprise Java Web applications. A remote code execution vulnerability exists in Struts2, which can be exploited by an attacker to remotely execute arbitrary code by calling a malicious expression using a REST plugin...

Оплата частями - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Оплата частями published at the 'play' market has multiple vulnerabilities...

ПриватБюджет - Corrupted files, Customized SSL, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application ПриватБюджет published at the 'play' market has multiple vulnerabilities...

XssPy - Web Application XSS Scanner

XssPy is a python tool for finding Cross Site Scripting vulnerabilities in websites. This tool is the first of its kind. Instead of just checking one page as most of the tools do, this tool traverses the website and find all the links and subdomains first. After that, it starts scanning each and...

phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting

phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting Exploit Title: phpMyFAQ 2.9.0 Stored XSS Date: 09-06-2016 Software Link: http://www.phpmyfaq.de/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description PHP...