АЗС Роснефть - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application АЗС Роснефть published at the 'play' market has multiple vulnerabilities...

UberEATS: Food Delivery - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application UberEATS: Food Delivery published at the 'play' market has multiple vulnerabilities...

Be-be-bears - Creative world - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Be-be-bears - Creative world published at the 'play' market has multiple vulnerabilities...

Бородач. День рождения Иришки - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Бородач. День рождения Иришки published at the 'play' market has multiple vulnerabilities...

TextNow - free text + calls - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TextNow - free text + calls published at the 'play' market has multiple vulnerabilities...

WhatsApp Messenger - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application WhatsApp Messenger published at the 'play' market has multiple vulnerabilities...

Pelco VideoXpert 1.12.105 - Information Disclosure

Pelco VideoXpert 1.12.105 - Information Disclosure Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: 2.0.41 1.14.7 1.12.105 Summary: VideoXpert is a video management solution...

Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The software transmits...

Uklon - Online Taxi App - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Uklon - Online Taxi App published at the 'play' market has multiple vulnerabilities...

Terraria - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Terraria published at the 'play' market has multiple vulnerabilities...

AskLike+ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AskLike+ published at the 'play' market has multiple vulnerabilities...

Celtic Heroes - 3D MMORPG - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Celtic Heroes - 3D MMORPG published at the 'play' market has multiple vulnerabilities...

VMware Boxer - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application VMware Boxer published at the 'play' market has multiple vulnerabilities...

Root Browser - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Root Browser published at the 'play' market has multiple vulnerabilities...

Free Mobile Recharge & Coupons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Mobile Recharge & Coupons published at the 'play' market has multiple vulnerabilities...

Inbox by Gmail - BSD license, Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Inbox by Gmail published at the 'play' market has multiple vulnerabilities...

CA24 Mobile - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application CA24 Mobile published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

CVE-2017-6028

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

CVE-2017-6028

Schneider Electric Modicon PLCs Modicon M241 (all firmware) and M251 (all firmware) are affected by CVE-2017-6028, where login credentials are transmitted over the network using Base64, enabling sniffing and potential unauthorized web access. No exploits are publicly known in the provided docs. R...