Lucene search
+L

6762 matches found

hackapp
hackapp
added 2016/12/23 5:35 a.m.14 views

1000 follower insta Brazil - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 follower insta Brazil published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/23 5:35 a.m.25 views

100 follower trick tips - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 100 follower trick tips published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/23 5:34 a.m.11 views

1000 Follower Amerika - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Follower Amerika published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2016/12/22 12:0 a.m.6 views

Samsung DVR Design Vulnerability

Samsung DVRs are small PCs used to record TV broadcasts, cable or DirectTV transmissions. Samsung DVR design vulnerability. Since the Samsung DVR web browser defaults to using HTTP port 80 to transmit base64-encoded credentials in the cookie header and base64-encodes only the login and password. ...

7.2AI score
SaveExploits0References1
hackapp
hackapp
added 2016/12/20 12:51 p.m.19 views

Score! Hero - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Score! Hero published at the 'play' market has multiple vulnerabilities...

0.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/18 8:21 p.m.9 views

Free Followers Plus - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers Plus published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/18 8:4 p.m.14 views

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/16 10:27 a.m.15 views

Nissan SmartCar - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Nissan SmartCar published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/15 6:14 p.m.12 views

FeaturePoints: Free Gift Cards - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FeaturePoints: Free Gift Cards published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/15 4:41 p.m.89 views

PhonePe - India's Payment App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PhonePe - India's Payment App published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/15 4:18 p.m.21 views

My Drive UAE - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Drive UAE published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/15 4:14 p.m.15 views

Infiniti Sense - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Infiniti Sense published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/15 4:13 p.m.19 views

Kia Remoto - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kia Remoto published at the 'play' market has multiple vulnerabilities...

1.6AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2016/12/15 6:59 a.m.18 views

CVE-2016-6845

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

6.1CVSS6.4AI score0.00713EPSS
SaveExploits0References2
OSV
OSV
added 2016/12/15 6:59 a.m.6 views

CVE-2016-6844

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

6.1CVSS5.8AI score0.00713EPSS
SaveExploits0References2
Prion
Prion
added 2016/12/15 6:59 a.m.19 views

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

4.3CVSS7.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2016/12/15 6:59 a.m.17 views

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

4.3CVSS7.1AI score0.00713EPSS
SaveExploits0References2Affected Software1
hackapp
hackapp
added 2016/12/14 2:3 p.m.335 views

BIGO LIVE - Live Broadcasting - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BIGO LIVE - Live Broadcasting published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/13 5:34 a.m.12 views

BimaTRI - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BimaTRI published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/12/12 11:18 a.m.13 views

SBB Mobile Business - Base64 encoded String, Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application SBB Mobile Business published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder