Weather Street Style - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather Street Style published at the 'play' market has multiple vulnerabilities...

Cloudera HUE Session cookies stored in the database

User session cookies are stored in the database. Combined with the vulnerability related to configuration file which is world readable, it is possible to spoof a user across the entire cluster launching jobs and browsing the datalake, without having to crack password hashes. Cookies are stored in...

Money Manager Expense & Budget - Base64 encoded String, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Money Manager Expense & Budget published at the 'play' market has multiple vulnerabilities...

Spendee - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Spendee published at the 'play' market has multiple vulnerabilities...

Toshl Finance Budget & Expense - Base64 encoded String, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Toshl Finance Budget & Expense published at the 'play' market has multiple vulnerabilities...

Home Bookkeeping Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Home Bookkeeping Lite published at the 'play' market has multiple vulnerabilities...

Cross site scripting

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

CVE-2017-7188: Improper Neutralization of Input During Web Page Generation

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...

Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...

PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...

My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...

RSA SecurID Software Token - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application RSA SecurID Software Token published at the 'play' market has multiple vulnerabilities...

VMware Browser - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application VMware Browser published at the 'play' market has multiple vulnerabilities...

Auto Comment - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auto Comment published at the 'play' market has multiple vulnerabilities...

HLR Lookup - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HLR Lookup published at the 'play' market has multiple vulnerabilities...

야놀자 - 전국 모텔/호텔/펜션/게하 숙박 예약 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 야놀자 - 전국 모텔/호텔/펜션/게하 숙박 예약 published at the 'play' market has multiple vulnerabilities...

Caillou House of Puzzles - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Caillou House of Puzzles published at the 'play' market has multiple vulnerabilities...

Disney Princess Palace Pets - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disney Princess Palace Pets published at the 'play' market has multiple vulnerabilities...

Crayola Jewelry Party - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Crayola Jewelry Party published at the 'play' market has multiple vulnerabilities...