CVE-2017-6028

Schneider Electric Modicon PLCs Modicon M241 (all firmware) and M251 (all firmware) are affected by CVE-2017-6028, where login credentials are transmitted over the network using Base64, enabling sniffing and potential unauthorized web access. No exploits are publicly known in the provided docs. R...

Dream League Soccer 2017 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dream League Soccer 2017 published at the 'play' market has multiple vulnerabilities...

Futurama: Worlds of Tomorrow - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Futurama: Worlds of Tomorrow published at the 'play' market has multiple vulnerabilities...

Jenkins Credential Collector

This module can be used to extract saved Jenkins credentials, user tokens, SSH keys, and secrets. Interesting files will be stored in loot along with combined csv output. require 'nokogiri' require 'base64' require 'digest' require 'openssl' require 'sshkey' class MetasploitModule 'Jenkins...

Badoo - Free Chat & Dating App - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Badoo - Free Chat & Dating App published at the 'play' market has multiple vulnerabilities...

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

WWE SuperCard - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WWE SuperCard published at the 'play' market has multiple vulnerabilities...

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

Deezer: Music & Song Streaming - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Deezer: Music & Song Streaming published at the 'play' market has multiple vulnerabilities...

Dormi - Baby Monitor - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dormi - Baby Monitor published at the 'play' market has multiple vulnerabilities...

Space Villain Voice Changer - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Space Villain Voice Changer published at the 'play' market has multiple vulnerabilities...

Darth Vader Voice Changer DTVC - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Darth Vader Voice Changer DTVC published at the 'play' market has multiple vulnerabilities...

File Manager (File transfer) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application File Manager File transfer published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : otrs (openSUSE-2017-691)

This update for otrs fixes the following issues : - CVE-2017-9324: Incorrect Access Control in OTRS - Improved SecureMode detection in Installer OSA-2017-03, bsc1043086 - bsc1043244: Reflected cross-site scripting in OTRS, customer search should not return results for internal OSA-2017-02 In...

Digikala - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Digikala published at the 'play' market has multiple vulnerabilities...

Azeus Convene Board Portal - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Azeus Convene Board Portal published at the 'play' market has multiple vulnerabilities...

Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution

!/usr/bin/python -- coding: utf-8 -- import requests import random import base64 upperAlpha = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" lowerAlpha = "abcdefghijklmnopqrstuvwxyz" numerals = "0123456789" allchars = chr for in xrange0x00, 0xFF + 0x01 def randbaselength, bad, chars: '''generate a random string wi...

imo free video calls and chat - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application imo free video calls and chat published at the 'play' market has multiple vulnerabilities...

MobiPay - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application MobiPay published at the 'play' market has multiple vulnerabilities...

Сбербанк Бизнес Онлайн - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Сбербанк Бизнес Онлайн published at the 'play' market has multiple vulnerabilities...