MARVEL Avengers Academy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application MARVEL Avengers Academy published at the 'play' market has multiple vulnerabilities...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Grand Theft Auto: iFruit - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Grand Theft Auto: iFruit published at the 'play' market has multiple vulnerabilities...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...

Clean Master (Boost & AppLock) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Boost & AppLock published at the 'play' market has multiple vulnerabilities...

Suicide Squad: Special Ops - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Suicide Squad: Special Ops published at the 'play' market has multiple vulnerabilities...

KPMG VR - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KPMG VR published at the 'play' market has multiple vulnerabilities...

Kaltura 11.1.0-2 - Remote Code Execution (Metasploit)

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kaltura Remote PHP Code Execution', 'Description' = %q This module exploits an Object Injecti...

Wrike - Project Management - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wrike - Project Management published at the 'play' market has multiple vulnerabilities...

Dashlane: Password Manager App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dashlane: Password Manager App published at the 'play' market has multiple vulnerabilities...

Format string

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...

CVE-2016-6537

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...

CVE-2016-6537

The CVE-2016-6537 entry relates to AVer Information EH6108H+ devices (firmware X9.03.24.00.07l and possibly earlier) that store passwords in base64 and expose credentials in HTTP cookies, enabling information exposure. Connected sources corroborate multiple vulnerabilities in the EH6108H+ DVR: ha...

Yandex.Mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Mail published at the 'play' market has multiple vulnerabilities...

디시인사이드 - dcinside - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 디시인사이드 - dcinside published at the 'play' market has multiple vulnerabilities...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

New Relic: SSO Authentication Bypass

Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...