CVE-2016-8617

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via CURLOPTUSERNAME...

UBUNTU-CVE-2016-8617

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via CURLOPTUSERNAME...

Yandex Browser for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex Browser for Android published at the 'play' market has multiple vulnerabilities...

Shadow Fight 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Fight 2 published at the 'play' market has multiple vulnerabilities...

Pirates - The Secret of Life - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pirates - The Secret of Life published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Komfy Switch with Camera DKZ-201S/W - Wifi Password Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

Komfy Switch with Camera DKZ-201SW - WiFi Password Disclosure

Komfy Switch with Camera DKZ-201SW - WiFi Password Disclosure !/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

Grammar - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Grammar published at the 'play' market has multiple vulnerabilities...

GiftOffs - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GiftOffs published at the 'play' market has multiple vulnerabilities...

ABN AMRO Mobiel Bankieren - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ABN AMRO Mobiel Bankieren published at the 'play' market has multiple vulnerabilities...

OLX: Reflective XSS at dubai.dubizzle.com

POC === 1 Visit: https://dubai.dubizzle.com/m/motors/used-cars/toyota/supra/2016/10/16/toyota-supra-original-left-hand-drive-duba-2-2/?back=amF2YXNjcmlwdDovLyUwQWFsZXJ0KGRvY3VtZW50LmRvbWFpbik=&fromsearch&highlightedads=1 2 Click on "Back" button in upper left hand corner Attack ==== URL Parameter...

Kamacaca - Premios Gratis - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kamacaca - Premios Gratis published at the 'play' market has multiple vulnerabilities...

An SQL injection vulnerability exists in the DBSHOP_0.9.3_Beta getQuery() function.

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta suffers from SQL injection vulnerability. Due to the /DBSHOP/module/Shopfront/src/Shopfront/Controller/GoodslistController.php at indexAction first through getQuery to get all the parameters,...

MARVEL Avengers Academy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application MARVEL Avengers Academy published at the 'play' market has multiple vulnerabilities...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Grand Theft Auto: iFruit - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Grand Theft Auto: iFruit published at the 'play' market has multiple vulnerabilities...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...

Clean Master (Boost & AppLock) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Boost & AppLock published at the 'play' market has multiple vulnerabilities...

Suicide Squad: Special Ops - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Suicide Squad: Special Ops published at the 'play' market has multiple vulnerabilities...