Cookie Blast Frenzy - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cookie Blast Frenzy published at the 'play' market has multiple vulnerabilities...

Toy Blast - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Toy Blast published at the 'play' market has multiple vulnerabilities...

Bingo Blast - BSD license, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Bingo Blast published at the 'play' market has multiple vulnerabilities...

Fairway Solitaire Blast - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Fairway Solitaire Blast published at the 'play' market has multiple vulnerabilities...

Candy Blast Mania - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Candy Blast Mania published at the 'play' market has multiple vulnerabilities...

Fruit Blast - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fruit Blast published at the 'play' market has multiple vulnerabilities...

CVE-2014-5858

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5858

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5858

The CVE-2014-5858 entry concerns the Candy Blast (com.appgame7.candyblast) Android app version 1.1.001, which fails to verify X.509 certificates from SSL servers. This weakens TLS and can permit a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The p...

Blast XPlayer Local Buffer Overflow PoC

No description provided by source. Title: Blast XPlayer Local Buffer Overflow PoC Vendor: http://sourceforge.net/projects/blast-player/files/latest/download?source=dlp Versions: Beta Platform: nix, windows Bug: Buffer Overflow ------------------------------------------------------- 1 Introduction...

Blast XPlayer - Local Buffer Overflow (PoC)

Title: Blast XPlayer Local Buffer Overflow PoC Vendor: http://sourceforge.net/projects/blast-player/files/latest/download?source=dlp Versions: Beta Platform: nix, windows Bug: Buffer Overflow ------------------------------------------------------- 1 Introduction 2 Proof of concept 3 Credits...

0day! phpweb pseudo-static page injection-vulnerability warning-the black bar safety net

phpweb all of the entire Station program pseudo-static pages are presentsql injection Main Station: http://phpweb.net/ Added’detection: http://www.phpweb.net/down/html/?772'. html Error The presence of injection. Can't use spaces, only use/Rowe http://www.phpweb.net/page/html/?56'//and//1=1/. htm...

Facebook Game - Bayou Blast Detected (deprecated)

Binary data 6417.prm...

Dazzle Blast - Remote File Inclusion

Dazzle Blast - Remote File Inclusion o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable...

Dazzle Blast Remote File Inclusion

o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable file...

Dazzle Blast Remote File Inclusion

Exploit for unknown platform in category web applications ================================== Dazzle Blast Remote File Inclusion ================================== o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Autho...

Dazzle Blast Remote File Inclusion

No description provided by source. o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable fi...

Dazzle Blast - Remote File Inclusion

o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable file...

Unfixed XSS vulnerability at bestfindinga.com

Security researcher Blast, has submitted on 05/10/2009 a cross-site-scripting XSS vulnerability affecting bestfindinga.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...