Open redirect

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Caref - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Caref published at the 'play' market has multiple vulnerabilities...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Baby Phone - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby Phone published at the 'play' market has multiple vulnerabilities...

Hearthstone Heroes of Warcraft - BSD license, Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearthstone Heroes of Warcraft published at the 'play' market has multiple vulnerabilities...

Mastercard Premium Selection - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mastercard Premium Selection published at the 'play' market has multiple vulnerabilities...

AirWatch Tunnel - Base64 encoded String, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Tunnel published at the 'play' market has multiple vulnerabilities...

AirWatch Container - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Container published at the 'play' market has multiple vulnerabilities...

WiFi Master Key - by wifi.com - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WiFi Master Key - by wifi.com published at the 'play' market has multiple vulnerabilities...

iKeyboard - emoji, emoticons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application iKeyboard - emoji, emoticons published at the 'play' market has multiple vulnerabilities...

Maverick: GPS Navigation - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Maverick: GPS Navigation published at the 'play' market has multiple vulnerabilities...

Monster Castle - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Monster Castle published at the 'play' market has multiple vulnerabilities...

Locus Map Free - Outdoor GPS - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Locus Map Free - Outdoor GPS published at the 'play' market has multiple vulnerabilities...

B&H Photo Video Pro Audio - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application B&H Photo Video Pro Audio published at the 'play' market has multiple vulnerabilities...

SAS Scandinavian Airlines - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SAS Scandinavian Airlines published at the 'play' market has multiple vulnerabilities...

Township - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Township published at the 'play' market has multiple vulnerabilities...

Squid (formerly Papyrus) - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Squid formerly Papyrus published at the 'play' market has multiple vulnerabilities...

Elemental Heroes - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elemental Heroes published at the 'play' market has multiple vulnerabilities...

GoM - Adventure Puzzle Game - Base64 encoded String, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application GoM - Adventure Puzzle Game published at the 'play' market has multiple vulnerabilities...

CVE-2016-3187

The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the REQUEST superglobal array, and consequently have unspecified impact, via a base64-encoded pp parameter...