Deezer: Music & Song Streaming - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Deezer: Music & Song Streaming published at the 'play' market has multiple vulnerabilities...

Dormi - Baby Monitor - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dormi - Baby Monitor published at the 'play' market has multiple vulnerabilities...

Space Villain Voice Changer - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Space Villain Voice Changer published at the 'play' market has multiple vulnerabilities...

Darth Vader Voice Changer DTVC - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Darth Vader Voice Changer DTVC published at the 'play' market has multiple vulnerabilities...

File Manager (File transfer) - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application File Manager File transfer published at the 'play' market has multiple vulnerabilities...

openSUSE Security Update : otrs (openSUSE-2017-691)

This update for otrs fixes the following issues : - CVE-2017-9324: Incorrect Access Control in OTRS - Improved SecureMode detection in Installer OSA-2017-03, bsc1043086 - bsc1043244: Reflected cross-site scripting in OTRS, customer search should not return results for internal OSA-2017-02 In...

Digikala - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Digikala published at the 'play' market has multiple vulnerabilities...

Azeus Convene Board Portal - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Azeus Convene Board Portal published at the 'play' market has multiple vulnerabilities...

Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution

!/usr/bin/python -- coding: utf-8 -- import requests import random import base64 upperAlpha = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" lowerAlpha = "abcdefghijklmnopqrstuvwxyz" numerals = "0123456789" allchars = chr for in xrange0x00, 0xFF + 0x01 def randbaselength, bad, chars: '''generate a random string wi...

imo free video calls and chat - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application imo free video calls and chat published at the 'play' market has multiple vulnerabilities...

MobiPay - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application MobiPay published at the 'play' market has multiple vulnerabilities...

Сбербанк Бизнес Онлайн - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Сбербанк Бизнес Онлайн published at the 'play' market has multiple vulnerabilities...

Educational Games for Kids - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Educational Games for Kids published at the 'play' market has multiple vulnerabilities...

Get Followers and Likes - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers and Likes published at the 'play' market has multiple vulnerabilities...

AirWatch Agent - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Agent published at the 'play' market has multiple vulnerabilities...

[ASA-201705-21] lib32-nss: arbitrary code execution

Arch Linux Security Advisory ASA-201705-21 ========================================== Severity: Critical Date : 2017-05-29 CVE-ID : CVE-2017-5461 Package : lib32-nss Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-248 Summary ======= The package lib32-nss...

StorySave - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application StorySave published at the 'play' market has multiple vulnerabilities...

Story Saver for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Story Saver for Instagram published at the 'play' market has multiple vulnerabilities...

Breaking News & Hot Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Breaking News & Hot Stories published at the 'play' market has multiple vulnerabilities...

SA150: NSS Vulnerability April 2017

SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to a security vulnerability. A remote attacker can send crafted Base64-encoded data and execute arbitrary code or cause denial of service through an application crash. AFFECTED PRODUCTS The following...