KPMG VR - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KPMG VR published at the 'play' market has multiple vulnerabilities...

Kaltura 11.1.0-2 - Remote Code Execution (Metasploit)

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kaltura Remote PHP Code Execution', 'Description' = %q This module exploits an Object Injecti...

Wrike - Project Management - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wrike - Project Management published at the 'play' market has multiple vulnerabilities...

Dashlane: Password Manager App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dashlane: Password Manager App published at the 'play' market has multiple vulnerabilities...

Format string

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...

CVE-2016-6537

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require cleartext credentials in HTTP Cookie headers, which allows context-dependent attacks to obtain sensitive information by reading these strings...

CVE-2016-6537

The CVE-2016-6537 entry relates to AVer Information EH6108H+ devices (firmware X9.03.24.00.07l and possibly earlier) that store passwords in base64 and expose credentials in HTTP cookies, enabling information exposure. Connected sources corroborate multiple vulnerabilities in the EH6108H+ DVR: ha...

Yandex.Mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Mail published at the 'play' market has multiple vulnerabilities...

디시인사이드 - dcinside - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 디시인사이드 - dcinside published at the 'play' market has multiple vulnerabilities...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

New Relic: SSO Authentication Bypass

Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

CVE-2016-7130

Removed by vendor...

UBUNTU-CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

WordPress MailPoet Newsletters 2.7.2 Cross Site Scripting

------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in MailPoet Newsletters plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

CVE-2016-7130

The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...

Штрафы ПДД 2016 - штрафы ГИБДД - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Штрафы ПДД 2016 - штрафы ГИБДД published at the 'play' market has multiple vulnerabilities...

Calendar Widget: Month - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Calendar Widget: Month published at the 'play' market has multiple vulnerabilities...