OANDA fxTrade for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application OANDA fxTrade for Android published at the 'play' market has multiple vulnerabilities...

Information Disclosure Or Denial Of Service (DoS)

libplist is vulnerable to information disclosure and denial of service DoS attacks. The vulnerability exists because the base64decode function in base64.c does not handle split encoded Apple Property List data...

Cicada-known CMS v5. 6 user-deny-reflective XSS vulnerability

Vulnerability overview Cicada-known open source version of the CMS v5. 6 in the user module of the deny method to render the template file, for user input of parameters for rendering, and not handled correctly, can lead to bypassing some of the filter, thereby causing the reflective XSS the...

The Last Door: Collector's Ed - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application The Last Door: Collector's Ed published at the 'play' market has multiple vulnerabilities...

КиноПоиск - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application КиноПоиск published at the 'play' market has multiple vulnerabilities...

Code injection

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

Scania Fleet - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Scania Fleet published at the 'play' market has multiple vulnerabilities...

Beepul - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Beepul published at the 'play' market has multiple vulnerabilities...

МДМ Банк - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application МДМ Банк published at the 'play' market has multiple vulnerabilities...

Castle Clash: Rise of Beasts - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Rise of Beasts published at the 'play' market has multiple vulnerabilities...

Audubon Birds of North America - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Audubon Birds of North America published at the 'play' market has multiple vulnerabilities...

Bank Millennium - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bank Millennium published at the 'play' market has multiple vulnerabilities...

BADLAND - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BADLAND published at the 'play' market has multiple vulnerabilities...

Meitu - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Meitu published at the 'play' market has multiple vulnerabilities...

Asphalt Xtreme: Offroad Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Asphalt Xtreme: Offroad Racing published at the 'play' market has multiple vulnerabilities...

Apache shiro 1.2.4 version of remote command execution vulnerability details-vulnerability warning-the black bar safety net

Search, I found online about apache shiro 1.2.4 version of the vulnerability consolidation report to write too simple, is perhaps the bigwigs speaking of professional, I this noob can't read the reason, specially in the local do a full show. First from the shiro official get shiro 1.2.4 of the...

Camly photo editor & collages - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Camly photo editor & collages published at the 'play' market has multiple vulnerabilities...

My Talking Angela - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Angela published at the 'play' market has multiple vulnerabilities...