Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

SBB Mobile Business - Base64 encoded String, Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application SBB Mobile Business published at the 'play' market has multiple vulnerabilities...

AbanteCart 1.2.7 - Cross-Site Scripting

AbanteCart 1.2.7 - Cross-Site Scripting Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all...

AbanteCart 1.2.7 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description B...

AbanteCart 1.2.7 - Cross-Site Scripting

Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all user input is escaped using...

Infiniti InTouch - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Infiniti InTouch published at the 'play' market has multiple vulnerabilities...

Fashion City 2 - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fashion City 2 published at the 'play' market has multiple vulnerabilities...

Banka Koper Wave2Pay - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Banka Koper Wave2Pay published at the 'play' market has multiple vulnerabilities...

Perchang - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Perchang published at the 'play' market has multiple vulnerabilities...

The Trail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application The Trail published at the 'play' market has multiple vulnerabilities...

Case Clicker 2 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Case Clicker 2 published at the 'play' market has multiple vulnerabilities...

Shadow Fight 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Fight 2 published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Grammar - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Grammar published at the 'play' market has multiple vulnerabilities...

ABN AMRO Mobiel Bankieren - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ABN AMRO Mobiel Bankieren published at the 'play' market has multiple vulnerabilities...

Kamacaca - Premios Gratis - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kamacaca - Premios Gratis published at the 'play' market has multiple vulnerabilities...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Clean Master (Boost & AppLock) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Boost & AppLock published at the 'play' market has multiple vulnerabilities...

Suicide Squad: Special Ops - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Suicide Squad: Special Ops published at the 'play' market has multiple vulnerabilities...

KPMG VR - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KPMG VR published at the 'play' market has multiple vulnerabilities...