CVE-2017-5461

Mozilla Network Security Services NSS before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact by leveraging incorrect base64 operations...

[ASA-201704-4] nss: arbitrary code execution

Arch Linux Security Advisory ASA-201704-4 ========================================= Severity: Critical Date : 2017-04-20 CVE-ID : CVE-2017-5461 Package : nss Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-247 Summary ======= The package nss before version...

RHEL 5 : nss (RHSA-2017:1103)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1103 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

UBUNTU-CVE-2017-5461

Mozilla Network Security Services NSS before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact by leveraging incorrect base64 operations...

Free VPN -Betternet WiFi Proxy - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free VPN -Betternet WiFi Proxy published at the 'play' market has multiple vulnerabilities...

CVE-2017-7188

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

CVE-2017-7188

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Cross site scripting

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Kids videos for YouTube - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Kids videos for YouTube published at the 'play' market has multiple vulnerabilities...

Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...

Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...

PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...

Tivibu - Base64 encoded String, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tivibu published at the 'play' market has multiple vulnerabilities...

My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...

Casino™ - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Casino™ published at the 'play' market has multiple vulnerabilities...

Barbie Magical Fashion - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Barbie Magical Fashion published at the 'play' market has multiple vulnerabilities...

SimCity BuildIt - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SimCity BuildIt published at the 'play' market has multiple vulnerabilities...

神魔之塔 - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 神魔之塔 published at the 'play' market has multiple vulnerabilities...

Automated Modular Cryptanalysis Tool: FeatherDuster

Automated Modular Cryptanalysis Tool FeatherDuster is a tool written by Daniel “unicornfurnace” Crowley of NCC Group for breaking crypto which tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts behind FeatherDuster, and...

RSA SecurID Software Token - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application RSA SecurID Software Token published at the 'play' market has multiple vulnerabilities...