SA150: NSS Vulnerability April 2017

SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to a security vulnerability. A remote attacker can send crafted Base64-encoded data and execute arbitrary code or cause denial of service through an application crash. AFFECTED PRODUCTS The following...

IPTVPanel Client - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application IPTVPanel Client published at the 'play' market has multiple vulnerabilities...

JETCO Pay P2P Collect - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application JETCO Pay P2P Collect published at the 'play' market has multiple vulnerabilities...

SafeNet MobilePASS+ - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application SafeNet MobilePASS+ published at the 'play' market has multiple vulnerabilities...

Clean Master Lite (Boost) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Lite Boost published at the 'play' market has multiple vulnerabilities...

Number book : real & caller ID - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Number book : real & caller ID published at the 'play' market has multiple vulnerabilities...

Castle Clash: Quyết Chiến - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Quyết Chiến published at the 'play' market has multiple vulnerabilities...

Download Music Free - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Download Music Free published at the 'play' market has multiple vulnerabilities...

Stun gun - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stun gun published at the 'play' market has multiple vulnerabilities...

Weather Street Style - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather Street Style published at the 'play' market has multiple vulnerabilities...

Cloudera HUE Session cookies stored in the database

User session cookies are stored in the database. Combined with the vulnerability related to configuration file which is world readable, it is possible to spoof a user across the entire cluster launching jobs and browsing the datalake, without having to crack password hashes. Cookies are stored in...

Money Manager Expense & Budget - Base64 encoded String, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Money Manager Expense & Budget published at the 'play' market has multiple vulnerabilities...

Spendee - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Spendee published at the 'play' market has multiple vulnerabilities...

Toshl Finance Budget & Expense - Base64 encoded String, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Toshl Finance Budget & Expense published at the 'play' market has multiple vulnerabilities...

Home Bookkeeping Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Home Bookkeeping Lite published at the 'play' market has multiple vulnerabilities...

Cross site scripting

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...

Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...

PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...

My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...