CVE-2017-7188: Improper Neutralization of Input During Web Page Generation

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...

Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...

PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...

Tivibu - Base64 encoded String, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tivibu published at the 'play' market has multiple vulnerabilities...

My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...

Casino™ - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Casino™ published at the 'play' market has multiple vulnerabilities...

Barbie Magical Fashion - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Barbie Magical Fashion published at the 'play' market has multiple vulnerabilities...

SimCity BuildIt - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SimCity BuildIt published at the 'play' market has multiple vulnerabilities...

神魔之塔 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 神魔之塔 published at the 'play' market has multiple vulnerabilities...

Automated Modular Cryptanalysis Tool: FeatherDuster

Automated Modular Cryptanalysis Tool FeatherDuster is a tool written by Daniel “unicornfurnace” Crowley of NCC Group for breaking crypto which tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts behind FeatherDuster, and...

RSA SecurID Software Token - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application RSA SecurID Software Token published at the 'play' market has multiple vulnerabilities...

VMware Browser - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application VMware Browser published at the 'play' market has multiple vulnerabilities...

Vodafone Cep Cüzdan - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Vodafone Cep Cüzdan published at the 'play' market has multiple vulnerabilities...

CIA - Caller ID & Call Blocker - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CIA - Caller ID & Call Blocker published at the 'play' market has multiple vulnerabilities...

Auto Comment - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auto Comment published at the 'play' market has multiple vulnerabilities...

libplist 'base64encode()' function local denial of service vulnerability

libplist is a small portable C library that handles Apple Property List files in binary or XML. A denial of service vulnerability exists in libimobiledevice libplist version 1.12 in the base64encode function in base64.c, which can cause a denial of service out-of-bounds read by a local user via a...

HLR Lookup - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HLR Lookup published at the 'play' market has multiple vulnerabilities...

Webank - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Webank published at the 'play' market has multiple vulnerabilities...

PT-2017-4198

Name of the Vulnerable Software and Affected Versions Modicon M241 versions all firmware versions Modicon M251 versions all firmware versions Description An issue was discovered where log-in credentials are sent over the network with Base64 encoding, leaving them susceptible to sniffing. Sniffed...