Terraria - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Terraria published at the 'play' market has multiple vulnerabilities...

AskLike+ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AskLike+ published at the 'play' market has multiple vulnerabilities...

Celtic Heroes - 3D MMORPG - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Celtic Heroes - 3D MMORPG published at the 'play' market has multiple vulnerabilities...

VMware Boxer - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application VMware Boxer published at the 'play' market has multiple vulnerabilities...

Root Browser - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Root Browser published at the 'play' market has multiple vulnerabilities...

Free Mobile Recharge & Coupons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Mobile Recharge & Coupons published at the 'play' market has multiple vulnerabilities...

Inbox by Gmail - BSD license, Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Inbox by Gmail published at the 'play' market has multiple vulnerabilities...

CA24 Mobile - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application CA24 Mobile published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

CVE-2017-6028

Schneider Electric Modicon PLCs Modicon M241 (all firmware) and M251 (all firmware) are affected by CVE-2017-6028, where login credentials are transmitted over the network using Base64, enabling sniffing and potential unauthorized web access. No exploits are publicly known in the provided docs. R...

CVE-2017-6028

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

CVE-2017-6028: Insufficiently Protected Credentials

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

Dream League Soccer 2017 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dream League Soccer 2017 published at the 'play' market has multiple vulnerabilities...

Futurama: Worlds of Tomorrow - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Futurama: Worlds of Tomorrow published at the 'play' market has multiple vulnerabilities...

Jenkins Credential Collector

This module can be used to extract saved Jenkins credentials, user tokens, SSH keys, and secrets. Interesting files will be stored in loot along with combined csv output. require 'nokogiri' require 'base64' require 'digest' require 'openssl' require 'sshkey' class MetasploitModule 'Jenkins...

Badoo - Free Chat & Dating App - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Badoo - Free Chat & Dating App published at the 'play' market has multiple vulnerabilities...

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

WWE SuperCard - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WWE SuperCard published at the 'play' market has multiple vulnerabilities...

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

Deezer: Music & Song Streaming - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Deezer: Music & Song Streaming published at the 'play' market has multiple vulnerabilities...