PhonePe - India's Payment App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PhonePe - India's Payment App published at the 'play' market has multiple vulnerabilities...

My Drive UAE - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My Drive UAE published at the 'play' market has multiple vulnerabilities...

Infiniti Sense - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Infiniti Sense published at the 'play' market has multiple vulnerabilities...

Kia Remoto - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kia Remoto published at the 'play' market has multiple vulnerabilities...

CVE-2016-6845

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

CVE-2016-6844

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

BIGO LIVE - Live Broadcasting - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BIGO LIVE - Live Broadcasting published at the 'play' market has multiple vulnerabilities...

BimaTRI - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BimaTRI published at the 'play' market has multiple vulnerabilities...

SBB Mobile Business - Base64 encoded String, Customized SSL, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application SBB Mobile Business published at the 'play' market has multiple vulnerabilities...

Cpu Temperature - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cpu Temperature published at the 'play' market has multiple vulnerabilities...

Gallery Pro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Gallery Pro published at the 'play' market has multiple vulnerabilities...

AbanteCart 1.2.7 - Cross-Site Scripting

Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all user input is escaped using...

AbanteCart 1.2.7 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description B...

AbanteCart 1.2.7 Cross Site Scripting

Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all user input is escaped using...

AbanteCart 1.2.7 - Cross-Site Scripting

AbanteCart 1.2.7 - Cross-Site Scripting Exploit Title: AbanteCart 1.2.7 Stored XSS Date: 06-12-2016 Software Link: http://www.abantecart.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description By default all...

PPPoker-Free Poker&Home Games - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PPPoker-Free Poker&Home Games published at the 'play' market has multiple vulnerabilities...

Yandex Launcher & Wallpapers - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex Launcher & Wallpapers published at the 'play' market has multiple vulnerabilities...

MapmyIndia Maps & Directions - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application MapmyIndia Maps & Directions published at the 'play' market has multiple vulnerabilities...