OOB write via unchecked multiplication

In libcurl's base64 encode function, the output buffer is allocated as follows without any checks on insize: malloc insize 4 / 3 + 4 On systems with 32-bit addresses in userspace e.g. x86, ARM, x32, the multiplication in the expression wraps around if insize is at least 1GB of data. If this...

IGEL OS Persistent Payload

Gain persistence for specified payload on IGEL OS Workspace Edition, by writing a payload to disk or base64-encoding and executing from registry. Module Options msf use exploit/linux/persistence/igel/persistence msf undefinedpersistence show actions ...actions... msf undefinedpersistence set ACTI...

CVE-2016-8617

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via CURLOPTUSERNAME...

UBUNTU-CVE-2016-8617

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via CURLOPTUSERNAME...

Yandex Browser for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex Browser for Android published at the 'play' market has multiple vulnerabilities...

Shadow Fight 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Fight 2 published at the 'play' market has multiple vulnerabilities...

Pirates - The Secret of Life - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pirates - The Secret of Life published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Komfy Switch with Camera DKZ-201S/W - Wifi Password Disclosure Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

Komfy Switch with Camera DKZ-201SW - WiFi Password Disclosure

Komfy Switch with Camera DKZ-201SW - WiFi Password Disclosure !/usr/bin/python Exploit Title: Komfy Switch with Camera Wifi Password Disclosure via Bluetooth BLE Date: Oct 13, 2016 Exploit Author: Jason Doyle @jasondoyle Vendor Homepage:...

Grammar - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Grammar published at the 'play' market has multiple vulnerabilities...

GiftOffs - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GiftOffs published at the 'play' market has multiple vulnerabilities...

ABN AMRO Mobiel Bankieren - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ABN AMRO Mobiel Bankieren published at the 'play' market has multiple vulnerabilities...

OLX: Reflective XSS at dubai.dubizzle.com

POC === 1 Visit: https://dubai.dubizzle.com/m/motors/used-cars/toyota/supra/2016/10/16/toyota-supra-original-left-hand-drive-duba-2-2/?back=amF2YXNjcmlwdDovLyUwQWFsZXJ0KGRvY3VtZW50LmRvbWFpbik=&fromsearch&highlightedads=1 2 Click on "Back" button in upper left hand corner Attack ==== URL Parameter...

Kamacaca - Premios Gratis - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kamacaca - Premios Gratis published at the 'play' market has multiple vulnerabilities...

An SQL injection vulnerability exists in the DBSHOP_0.9.3_Beta getQuery() function.

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta suffers from SQL injection vulnerability. Due to the /DBSHOP/module/Shopfront/src/Shopfront/Controller/GoodslistController.php at indexAction first through getQuery to get all the parameters,...

MARVEL Avengers Academy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application MARVEL Avengers Academy published at the 'play' market has multiple vulnerabilities...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Grand Theft Auto: iFruit - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Grand Theft Auto: iFruit published at the 'play' market has multiple vulnerabilities...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...