6999 matches found
PPPoker-Free Poker&Home Games - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application PPPoker-Free Poker&Home Games published at the 'play' market has multiple vulnerabilities...
Yandex Launcher & Wallpapers - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Yandex Launcher & Wallpapers published at the 'play' market has multiple vulnerabilities...
MapmyIndia Maps & Directions - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application MapmyIndia Maps & Directions published at the 'play' market has multiple vulnerabilities...
Infiniti InTouch - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Infiniti InTouch published at the 'play' market has multiple vulnerabilities...
Pregnancy + - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Pregnancy + published at the 'play' market has multiple vulnerabilities...
РЖД Грузы - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application РЖД Грузы published at the 'play' market has multiple vulnerabilities...
Fashion City 2 - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Fashion City 2 published at the 'play' market has multiple vulnerabilities...
php: wddx_deserialize null dereference
The phpwddxpopelement function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service NULL pointer dereference and application crash or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a...
Trend Micro Smart Protection Server Exec Remote Code Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'openssl' require 'base64' class MetasploitModule "Trend Micro Smart Protection Server Exec Remote Code Injection", 'Description' = %q This...
Boonex Dolphin 7.3.2 - Authentication Bypass Remote Code Execution
Boonex Dolphin 7.3.2 - Authentication Bypass Remote Code Execution !/usr/bin/env python -- coding: utf-8 -- ''' Software : Dolphin = 7.3.2 Auth bypass / RCE exploit Vendor : www.boonex.com Author : Ahmed sultan 0x4148 Home : 0x4148.com | https://www.linkedin.com/in/0x4148 Email : [email protected]...
Gardenscapes - New Acres - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Gardenscapes - New Acres published at the 'play' market has multiple vulnerabilities...
Banka Koper Wave2Pay - Base64 encoded String, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Banka Koper Wave2Pay published at the 'play' market has multiple vulnerabilities...
Perchang - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Perchang published at the 'play' market has multiple vulnerabilities...
Walking Dead: Road to Survival - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Walking Dead: Road to Survival published at the 'play' market has multiple vulnerabilities...
The Trail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application The Trail published at the 'play' market has multiple vulnerabilities...
Debian DSA-3705-1 : curl - security update
Several vulnerabilities were discovered in cURL, an URL transfer library : - CVE-2016-8615 It was discovered that a malicious HTTP server could inject new cookies for arbitrary domains into a cookie jar. - CVE-2016-8616 It was discovered that when re-using a connection, curl was doing case...
Case Clicker 2 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Case Clicker 2 published at the 'play' market has multiple vulnerabilities...
USN-3123-1: curl vulnerabilities
It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to hijack the authentication of a TLS connection. CVE-2016-7141 Nguyen Vu Hoang discovered that curl incorrectly handled escaping certain strings. A remote...
Meine Karte - Base64 encoded String, GPL license, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Meine Karte published at the 'play' market has multiple vulnerabilities...