Digikala - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Digikala published at the 'play' market has multiple vulnerabilities...

Azeus Convene Board Portal - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Azeus Convene Board Portal published at the 'play' market has multiple vulnerabilities...

Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution

!/usr/bin/python -- coding: utf-8 -- import requests import random import base64 upperAlpha = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" lowerAlpha = "abcdefghijklmnopqrstuvwxyz" numerals = "0123456789" allchars = chr for in xrange0x00, 0xFF + 0x01 def randbaselength, bad, chars: '''generate a random string wi...

imo free video calls and chat - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application imo free video calls and chat published at the 'play' market has multiple vulnerabilities...

MobiPay - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application MobiPay published at the 'play' market has multiple vulnerabilities...

Сбербанк Бизнес Онлайн - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Сбербанк Бизнес Онлайн published at the 'play' market has multiple vulnerabilities...

Educational Games for Kids - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Educational Games for Kids published at the 'play' market has multiple vulnerabilities...

Get Followers and Likes - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers and Likes published at the 'play' market has multiple vulnerabilities...

AirWatch Agent - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Agent published at the 'play' market has multiple vulnerabilities...

[ASA-201705-21] lib32-nss: arbitrary code execution

Arch Linux Security Advisory ASA-201705-21 ========================================== Severity: Critical Date : 2017-05-29 CVE-ID : CVE-2017-5461 Package : lib32-nss Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-248 Summary ======= The package lib32-nss...

StorySave - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application StorySave published at the 'play' market has multiple vulnerabilities...

Story Saver for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Story Saver for Instagram published at the 'play' market has multiple vulnerabilities...

Breaking News & Hot Stories - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Breaking News & Hot Stories published at the 'play' market has multiple vulnerabilities...

SA150: NSS Vulnerability April 2017

SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to a security vulnerability. A remote attacker can send crafted Base64-encoded data and execute arbitrary code or cause denial of service through an application crash. AFFECTED PRODUCTS The following...

Likes for Instagram - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Likes for Instagram published at the 'play' market has multiple vulnerabilities...

IPTVPanel Client - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application IPTVPanel Client published at the 'play' market has multiple vulnerabilities...

BSPlayer FREE - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BSPlayer FREE published at the 'play' market has multiple vulnerabilities...

Yandex.Metro - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Metro published at the 'play' market has multiple vulnerabilities...

INOKIM - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application INOKIM published at the 'play' market has multiple vulnerabilities...

Debian DLA-946-1 : nss security update

The NSS library is vulnerable to two security issues : CVE-2017-5461 Out-of-bounds write in Base64 encoding. This can trigger a crash denial of service and might be exploitable for code execution. CVE-2017-5462 A flaw in DRBG number generation where the internal state V does not correctly carry...