SHAREit - Transfer & Share - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SHAREit - Transfer & Share published at the 'play' market has multiple vulnerabilities...

Private SMS & Call - Hide Text - Base64 encoded String, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Private SMS & Call - Hide Text published at the 'play' market has multiple vulnerabilities...

Jams Music Player - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Jams Music Player published at the 'play' market has multiple vulnerabilities...

Unfollow All for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Unfollow All for Instagram published at the 'play' market has multiple vulnerabilities...

Get Followers for Instagram - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers for Instagram published at the 'play' market has multiple vulnerabilities...

Free Followers for IG - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers for IG published at the 'play' market has multiple vulnerabilities...

JioChat: Free Video Call & SMS - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application JioChat: Free Video Call & SMS published at the 'play' market has multiple vulnerabilities...

AirWatch Inbox - Apache license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Inbox published at the 'play' market has multiple vulnerabilities...

For the Node. js in the node-serialize module deserialization vulnerability the subsequent analysis-vulnerability warning-the black bar safety net

Of the Node. js serialization remote command execution vulnerabilities of a number of follow-up found and how to develop the attack load. A few days ago I was in opsecx blog found an article How to use a named node-serialize nodejs module in the RCE remote code execution error blog. The article...

Download Manager Pro FREE - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager Pro FREE published at the 'play' market has multiple vulnerabilities...

Advanced Download Manager Holo - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Advanced Download Manager Holo published at the 'play' market has multiple vulnerabilities...

Advanced Download Manager - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Advanced Download Manager published at the 'play' market has multiple vulnerabilities...

Unfollowers for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Unfollowers for Instagram published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

Microsoft OneDrive - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Microsoft OneDrive published at the 'play' market has multiple vulnerabilities...

Video Converter, Compressor - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Video Converter, Compressor published at the 'play' market has multiple vulnerabilities...

Denial Of Service (DoS) Through Memory Corruption

OpenSSL is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible because of an integer underflow in the EVPDecodeUpdate function. The use of base64 data can trigger this buffer overflow which can cause memory corruption...

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

Microsoft Office Word Malicious Macro Execution Exploit

This Metasploit module generates a macro-enabled Microsoft Office Word document. The comments metadata in the data is injected with a Base64 encoded payload, which will be decoded by the macro and execute as a Windows executable. For a successful attack, the victim is required to manually enable...

OANDA fxTrade for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application OANDA fxTrade for Android published at the 'play' market has multiple vulnerabilities...