Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution Exploit

This module exploits an un-authenticated code injection vulnerability in the bassmaster nodejs plugin for hapi. The vulnerability is within the batch endpoint and allows an attacker to dynamically execute JavaScript code on the server side using an eval. Note that the code uses a '\x2f' character...

Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution

This module exploits an un-authenticated code injection vulnerability in the bassmaster nodejs plugin for hapi. The vulnerability is within the batch endpoint and allows an attacker to dynamically execute JavaScript code on the server side using an eval. Note that the code uses a '\x2f' character...

BSB Bank - Apache license, BSD license, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application BSB Bank published at the 'play' market has multiple vulnerabilities...

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

Snapseed - BSD license, LGPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Snapseed published at the 'play' market has multiple vulnerabilities...

שופרסל - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application שופרסל published at the 'play' market has multiple vulnerabilities...

OpenSSL Patches High-Severity OCSP Bug, Mitigates SWEET32 Attack

A vulnerability in the OpenSSL implementation of the Online Certificate Status Protocol OCSP was patched this week, closing a denial-of-service weakness in affected servers. The patch was the most severe of 14 released yesterday by OpenSSL. OCSP is an alternative in many cases to Certificate...

HipChat - Chat Built for Teams - BSD license, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application HipChat - Chat Built for Teams published at the 'play' market has multiple vulnerabilities...

Hangouts - BSD license, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Hangouts published at the 'play' market has multiple vulnerabilities...

CodeWarrior - Just Another Manual Code Analysis Tool And Static Analysis Tool

Just another manual code analysis tool and static analysis tool Codewarrior runs at HTTPd with TLS, uses KISS principle https://en.wikipedia.org/wiki/KISSprinciple Directories: web/ = local of javascripts and html and css sources src/ = C source code, this code talking with web socket eggs/ =...

Davivienda Móvil - BSD license, Customized SSL, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Davivienda Móvil published at the 'play' market has multiple vulnerabilities...

台新企業網銀 - BSD license, GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application 台新企業網銀 published at the 'play' market has multiple vulnerabilities...

Manalyze - A static analyzer for PE executables

Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior. A static analyzer for PE files Manalyze was written in C++ for Windows and Linux and is released under the terms of the GPLv3 license . It is a robust parser for PE files with a flexible...

Google+ - BSD license, Exported ContentProvider, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Google+ published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: mingw-libarchive-3.2.1-2.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

MasterCard for You - BSD license, LGPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard for You published at the 'play' market has multiple vulnerabilities...

Reflex Latino - BSD license, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application Reflex Latino published at the 'play' market has multiple vulnerabilities...

Prezi Viewer - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Prezi Viewer published at the 'play' market has multiple vulnerabilities...

My Kyivstar - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application My Kyivstar published at the 'play' market has multiple vulnerabilities...

[SECURITY] Fedora 24 Update: libarchive-3.2.1-3.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...