2119 matches found
1000 Follower intsa Kosovo - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application 1000 Follower intsa Kosovo published at the 'play' market has multiple vulnerabilities...
던파조선 커뮤니티 (게임뉴스/커뮤니티) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 던파조선 커뮤니티 게임뉴스/커뮤니티 published at the 'play' market has multiple vulnerabilities...
Yandex.Flights - BSD license, Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Yandex.Flights published at the 'play' market has multiple vulnerabilities...
Яндекс.Район - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Яндекс.Район published at the 'play' market has multiple vulnerabilities...
Sonic Dash - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Sonic Dash published at the 'play' market has multiple vulnerabilities...
1000 follower insta Brazil - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application 1000 follower insta Brazil published at the 'play' market has multiple vulnerabilities...
100 follower trick tips - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application 100 follower trick tips published at the 'play' market has multiple vulnerabilities...
Free Followers Plus - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Free Followers Plus published at the 'play' market has multiple vulnerabilities...
Nissan SmartCar - Base64 encoded String, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Nissan SmartCar published at the 'play' market has multiple vulnerabilities...
FeaturePoints: Free Gift Cards - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application FeaturePoints: Free Gift Cards published at the 'play' market has multiple vulnerabilities...
Infiniti Sense - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Infiniti Sense published at the 'play' market has multiple vulnerabilities...
Kia Remoto - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Kia Remoto published at the 'play' market has multiple vulnerabilities...
CVE-2016-6845
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...
Design/Logic Flaw
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...
PT-2016-7138
Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue in Open-Xchange OX App Suite allows script code within hyperlinks at HTML emails to be executed when using base64 encoded data resources, due to incorrect sanitization...
CVE-2016-6845: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...
SBB Mobile Business - Base64 encoded String, Customized SSL, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application SBB Mobile Business published at the 'play' market has multiple vulnerabilities...
AbanteCart 1.2.7 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description B...
AbanteCart 1.2.7 - Cross-Site Scripting
AbanteCart 1.2.7 - Cross-Site Scripting Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all...
AbanteCart 1.2.7 - Cross-Site Scripting
Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all user input is escaped using...