6761 matches found
Mi Fit - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Mi Fit published at the 'play' market has multiple vulnerabilities...
United Airlines - Base64 encoded String, Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application United Airlines published at the 'play' market has multiple vulnerabilities...
FreePBX 13/14 - Remote Command Execution / Privilege Escalation
!/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26...
OLX: XSS on Meta Tag at https://m.olx.ph
Hi, There is improper validation at q parameter on https://m.olx.ph/ where it can be manipulated by an attacker to include his/her XSS payload to execute javascript code. As example: https://m.olx.ph/all-results?q=0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg"...
NBA LIVE Mobile - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NBA LIVE Mobile published at the 'play' market has multiple vulnerabilities...
Gratipay: Avoid "resend verification email" confusion
Let's assume Alice has a Gratipay account https://gratipay.com/alice and an [email protected] email 1. Mallory creates an a1[email protected] email address, base64-encodes it, and sends Alice a link https://gratipay.com/alice/emails/verify.html?email2=YTFpY2VAZm9vLmNvbQ&nonce=x 2. When Alice opens the...
AnyBalance (balance on screen) - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application AnyBalance balance on screen published at the 'play' market has multiple vulnerabilities...
CARD WARS-RPG-Strategiespiel - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application CARD WARS-RPG-Strategiespiel published at the 'play' market has multiple vulnerabilities...
Kate Mobile Lite для ВКонтакте - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Kate Mobile Lite для ВКонтакте published at the 'play' market has multiple vulnerabilities...
Кабинет продавца Prom.ua - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Кабинет продавца Prom.ua published at the 'play' market has multiple vulnerabilities...
Vector 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Vector 2 published at the 'play' market has multiple vulnerabilities...
Tank Strike 3D - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Tank Strike 3D published at the 'play' market has multiple vulnerabilities...
Авто.ру: купить и продать авто - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Авто.ру: купить и продать авто published at the 'play' market has multiple vulnerabilities...
LA NACION - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application LA NACION published at the 'play' market has multiple vulnerabilities...
Shiro RememberMe 1.2.4 deserialize the result of command execution vulnerability
Author: rungobier 知道创宇404安全实验室 概述 Apache Shiro 在 Java 的权限及安全验证框架中占用重要的一席之地，在它编号为550的 issue 中爆出严重的 Java 反序列化漏洞。下面，我们将模拟还原此漏洞的场景以及分析过程。 0x01 漏洞场景还原 首先，需要获取 Apache Shiro 存在漏洞的源代码，具体操作如下: git clone https://github.com/apache/shiro.git git checkout shiro-root-1.2.4 cd ./shiro/samples/web...
MeowChat - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application MeowChat published at the 'play' market has multiple vulnerabilities...
Guide for Poke Go - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Guide for Poke Go published at the 'play' market has multiple vulnerabilities...
Pokémon Shuffle Mobile - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Pokémon Shuffle Mobile published at the 'play' market has multiple vulnerabilities...
Electro Drum Pads 24 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Electro Drum Pads 24 published at the 'play' market has multiple vulnerabilities...
Earn to Die 2 - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Earn to Die 2 published at the 'play' market has multiple vulnerabilities...