КиноПоиск - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application КиноПоиск published at the 'play' market has multiple vulnerabilities...

Scania Fleet - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Scania Fleet published at the 'play' market has multiple vulnerabilities...

Audubon Birds of North America - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Audubon Birds of North America published at the 'play' market has multiple vulnerabilities...

Asphalt Xtreme: Offroad Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Asphalt Xtreme: Offroad Racing published at the 'play' market has multiple vulnerabilities...

Camly photo editor & collages - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Camly photo editor & collages published at the 'play' market has multiple vulnerabilities...

PONS School Library - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PONS School Library published at the 'play' market has multiple vulnerabilities...

1000 Follower intsa Kosovo - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Follower intsa Kosovo published at the 'play' market has multiple vulnerabilities...

던파조선 커뮤니티 (게임뉴스/커뮤니티) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 던파조선 커뮤니티 게임뉴스/커뮤니티 published at the 'play' market has multiple vulnerabilities...

Yandex.Flights - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Flights published at the 'play' market has multiple vulnerabilities...

Яндекс.Район - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Яндекс.Район published at the 'play' market has multiple vulnerabilities...

Sonic Dash - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Sonic Dash published at the 'play' market has multiple vulnerabilities...

1000 follower insta Brazil - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 follower insta Brazil published at the 'play' market has multiple vulnerabilities...

100 follower trick tips - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 100 follower trick tips published at the 'play' market has multiple vulnerabilities...

Free Followers Plus - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers Plus published at the 'play' market has multiple vulnerabilities...

Nissan SmartCar - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Nissan SmartCar published at the 'play' market has multiple vulnerabilities...

FeaturePoints: Free Gift Cards - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FeaturePoints: Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Infiniti Sense - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Infiniti Sense published at the 'play' market has multiple vulnerabilities...

Kia Remoto - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kia Remoto published at the 'play' market has multiple vulnerabilities...

CVE-2016-6845

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...