6977 matches found
imo beta free calls and text - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application imo beta free calls and text published at the 'play' market has multiple vulnerabilities...
Gangstar Vegas - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Gangstar Vegas published at the 'play' market has multiple vulnerabilities...
Pebble - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Pebble published at the 'play' market has multiple vulnerabilities...
D-Link '/improtexport.php' Multiple Series Products SQL Injection Vulnerability
D-Link DAR-8000-X series and DAR-7000-x series Internet Access Behavior Audit Gateways provide Internet access behavior management solutions. An SQL injection vulnerability exists in several D-Link series products. The vulnerability generates a file in /improtexport.php, where previous defenses a...
PHP 'php_base64_encode()' function integer overflow vulnerability
PHP is an open source general-purpose computer scripting language. The PHP 'phpbase64encode' function integer overflow vulnerability allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a denia...
Python Keylogger: Radium
Python Keylogger With Multiple Features Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording logging the keys struck on a keyboard, typically covertly, so that the person using the keyboard is unaware that their actions are being monitored. Keyloggi...
Stepic.org: Free Courses - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Stepic.org: Free Courses published at the 'play' market has multiple vulnerabilities...
Dropbox: XSS in OAuth Redirect Url
Hello guys, I found a XSS vulnerability in the OAuth Redirect Url parameter . So deep into the bug : Go to https://www.dropbox.com/developers/ Create an application In Redirect URIs , if you try to add javascript:alert1 it will tell you that javascript protocol is not accepted. But if you try to...
Yandex.Navigator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Yandex.Navigator published at the 'play' market has multiple vulnerabilities...
Yandex.Disk - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Yandex.Disk published at the 'play' market has multiple vulnerabilities...
Spectral Match:Match d Colors - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Spectral Match:Match d Colors published at the 'play' market has multiple vulnerabilities...
Phoenix Exploit Kit - Remote Code Execution (Metasploit)
Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Phoenix Exploit Kit Remote Code Execution', 'Description' = %q This module...
Internet Bug Bounty: integer overflow in base64_decode caused heap corruption
Please check: https://bugs.php.net/bug.php?id=72836...
Mi Fit - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Mi Fit published at the 'play' market has multiple vulnerabilities...
United Airlines - Base64 encoded String, Customized SSL, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application United Airlines published at the 'play' market has multiple vulnerabilities...
FreePBX 13/14 - Remote Command Execution / Privilege Escalation
!/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26...
OLX: XSS on Meta Tag at https://m.olx.ph
Hi, There is improper validation at q parameter on https://m.olx.ph/ where it can be manipulated by an attacker to include his/her XSS payload to execute javascript code. As example: https://m.olx.ph/all-results?q=0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg"...
NBA LIVE Mobile - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application NBA LIVE Mobile published at the 'play' market has multiple vulnerabilities...
Gratipay: Avoid "resend verification email" confusion
Let's assume Alice has a Gratipay account https://gratipay.com/alice and an [email protected] email 1. Mallory creates an a1[email protected] email address, base64-encodes it, and sends Alice a link https://gratipay.com/alice/emails/verify.html?email2=YTFpY2VAZm9vLmNvbQ&nonce=x 2. When Alice opens the...
AnyBalance (balance on screen) - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application AnyBalance balance on screen published at the 'play' market has multiple vulnerabilities...