Skype For Business 2013 User Enumeration

Exploit Title: Skype for Business 2013 user enumeration timing attack Date: 2016-06-08 Exploit Author: nyxgeek Vendor Homepage: https://www.microsoft.com Version: Skype for Business 2013 Skype for Business 2013 is vulnerable to a timing attack that allows for username enumeration When Skype/Lync ...

CVE-2016-3687

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Open redirect

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Caref - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Caref published at the 'play' market has multiple vulnerabilities...

Apache Shiro v1.2.4 Cookie RememberME Deserial RCE

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache Shiro v1.2.4. Note that other versions of Apache Shiro may also be exploitable if the encryption key used by Shiro to encrypt rememberMe cookies is known. The gadget chain used for Java...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Cameras Estonia - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cameras Estonia published at the 'play' market has multiple vulnerabilities...

Kids Animals Jigsaw Puzzles - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Animals Jigsaw Puzzles published at the 'play' market has multiple vulnerabilities...

Learning colors for kids - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learning colors for kids published at the 'play' market has multiple vulnerabilities...

Baby Phone - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby Phone published at the 'play' market has multiple vulnerabilities...

ABC for kids – learn Alphabet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC for kids – learn Alphabet published at the 'play' market has multiple vulnerabilities...

Hearthstone Heroes of Warcraft - BSD license, Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearthstone Heroes of Warcraft published at the 'play' market has multiple vulnerabilities...

Mastercard Premium Selection - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mastercard Premium Selection published at the 'play' market has multiple vulnerabilities...

Acorns - Invest Spare Change - Base64 encoded String, Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Acorns - Invest Spare Change published at the 'play' market has multiple vulnerabilities...

AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities

AirOS NanoStation M2 v5.6-beta Arbitrary File Download & Remote Command Execution Tested on: XM.v5.6-beta5.24359.141008.1753 - Build: 2435 Linux Awesome 2.6.32.63 1 Wed Oct 8 17:54:30 EEST 2014 mips unknown Date: May 30, 2016 Informer: Pablo Rebolini - Valid credentials are required !. Most of...

BloomSky Weather - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BloomSky Weather published at the 'play' market has multiple vulnerabilities...

WDliveapp - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application WDliveapp published at the 'play' market has multiple vulnerabilities...

Miss Hollywood: Vacation - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Miss Hollywood: Vacation published at the 'play' market has multiple vulnerabilities...

Mobile@Work - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mobile@Work published at the 'play' market has multiple vulnerabilities...

AirWatch Tunnel - Base64 encoded String, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Tunnel published at the 'play' market has multiple vulnerabilities...