Video Converter, Compressor - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Video Converter, Compressor published at the 'play' market has multiple vulnerabilities...

Denial Of Service (DoS) Through Memory Corruption

OpenSSL is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible because of an integer underflow in the EVPDecodeUpdate function. The use of base64 data can trigger this buffer overflow which can cause memory corruption...

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

Microsoft Office Word Malicious Macro Execution Exploit

This Metasploit module generates a macro-enabled Microsoft Office Word document. The comments metadata in the data is injected with a Base64 encoded payload, which will be decoded by the macro and execute as a Windows executable. For a successful attack, the victim is required to manually enable...

OANDA fxTrade for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application OANDA fxTrade for Android published at the 'play' market has multiple vulnerabilities...

Information Disclosure Or Denial Of Service (DoS)

libplist is vulnerable to information disclosure and denial of service DoS attacks. The vulnerability exists because the base64decode function in base64.c does not handle split encoded Apple Property List data...

Cicada-known CMS v5. 6 user-deny-reflective XSS vulnerability

Vulnerability overview Cicada-known open source version of the CMS v5. 6 in the user module of the deny method to render the template file, for user input of parameters for rendering, and not handled correctly, can lead to bypassing some of the filter, thereby causing the reflective XSS the...

The Last Door: Collector's Ed - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application The Last Door: Collector's Ed published at the 'play' market has multiple vulnerabilities...

КиноПоиск - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application КиноПоиск published at the 'play' market has multiple vulnerabilities...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

Code injection

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

Scania Fleet - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Scania Fleet published at the 'play' market has multiple vulnerabilities...

Beepul - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Beepul published at the 'play' market has multiple vulnerabilities...

МДМ Банк - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application МДМ Банк published at the 'play' market has multiple vulnerabilities...

Castle Clash: Rise of Beasts - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Rise of Beasts published at the 'play' market has multiple vulnerabilities...

Audubon Birds of North America - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Audubon Birds of North America published at the 'play' market has multiple vulnerabilities...

Bank Millennium - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bank Millennium published at the 'play' market has multiple vulnerabilities...

BADLAND - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BADLAND published at the 'play' market has multiple vulnerabilities...

Meitu - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Meitu published at the 'play' market has multiple vulnerabilities...