DEBIAN-CVE-2017-6437

The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service out-of-bounds read via a crafted plist file...

BPM Mobile - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BPM Mobile published at the 'play' market has multiple vulnerabilities...

D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass and do not protect credentials

Overview The D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass of the remote login page, and do not sufficiently protect administrator credentials. Description The D-Link DIR-130, firmware version 1.23, and DIR-330, firmware version 1.12, are vulnerable to the following:CWE-294:...

CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

Privilege escalation

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

CVE-2017-6896

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

CVE-2017-6896

The CVE-2017-6896 entry concerns the DIGISOL DG-HR1400 wireless router. Affected component: the authentication/session handling for DG-HR1400 1.00.02. Root cause (as described): privilege escalation is achievable by modifying the Base64-encoded session cookie value, enabling an attacker to rise f...

LEGO® City My City 2 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LEGO® City My City 2 published at the 'play' market has multiple vulnerabilities...

CVE-2017-6896: Reliance on Cookies without Validation and Integrity Checking

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value...

Yandex.Jobs - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Jobs published at the 'play' market has multiple vulnerabilities...

Get Followers Pro - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers Pro published at the 'play' market has multiple vulnerabilities...

iboardpro- tool for Instagram - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application iboardpro- tool for Instagram published at the 'play' market has multiple vulnerabilities...

Fallout Shelter - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fallout Shelter published at the 'play' market has multiple vulnerabilities...

BeeSmarty tamagotchi-organizer - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BeeSmarty tamagotchi-organizer published at the 'play' market has multiple vulnerabilities...

Armorfly Browser Downloader - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Armorfly Browser Downloader published at the 'play' market has multiple vulnerabilities...

Fast Browser - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Browser published at the 'play' market has multiple vulnerabilities...

Smart Search & Web Browser - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Smart Search & Web Browser published at the 'play' market has multiple vulnerabilities...

CM Browser - Fast & Light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CM Browser - Fast & Light published at the 'play' market has multiple vulnerabilities...

Huawei HG658 V2 Cross Site Scripting

HUAWEI HG658 V2 = Modem Web Interface Reflected XSS Vulnerability My + Discovered by: KnocKout Contact : [email protected] HomePage : http://cyber-warrior.org Software info |Hardware/Web App : HUAWEI |Affected Version : HG658 V2 |Official Web: http://www.huawei.com INFO the same network with...