Toshl Finance Budget & Expense - Base64 encoded String, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Toshl Finance Budget & Expense published at the 'play' market has multiple vulnerabilities...

Home Bookkeeping Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Home Bookkeeping Lite published at the 'play' market has multiple vulnerabilities...

Fedora 25 : mediawiki (2017-3fb95ed01f)

T109140 T122209 Special:UserLogin and Special:Search allow redirect to interwiki links. CVE-2017-0363, CVE-2017-0364 - T144845 XSS in SearchHighlighter::highlightText when $wgAdvancedSearchHighlighting is true. CVE-2017-0365 - T125177 API parameters may now be marked as 'sensitive' to keep their...

Cross site scripting

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

CVE-2017-7188: Improper Neutralization of Input During Web Page Generation

Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...

Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...

Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...

PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...

My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...

RSA SecurID Software Token - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application RSA SecurID Software Token published at the 'play' market has multiple vulnerabilities...

VMware Browser - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application VMware Browser published at the 'play' market has multiple vulnerabilities...

CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

UBUNTU-CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

DEBIAN-CVE-2017-7443

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

Auto Comment - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Auto Comment published at the 'play' market has multiple vulnerabilities...

PT-2017-17740

Name of the Vulnerable Software and Affected Versions apt-cacher versions prior to 1.7.15 apt-cacher-ng versions prior to 3.4 Description The issue is related to HTTP response splitting via encoded newline characters. This is due to the lack of blocking for the %0ad regular expression, which can ...

CVE-2017-7443: Improper Neutralization of CRLF Sequences in HTTP Headers

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...

HLR Lookup - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HLR Lookup published at the 'play' market has multiple vulnerabilities...

Starbucks: Stored XSS in comments on https://www.starbucks.co.uk/blog/*

Hi, there are a lot of published blog post under https://www.starbucks.co.uk/blog/. You can find plenty of them using this google dork site:www.starbucks.co.uk inurl:blog/. Notice the comments functionality at the bottom at the page. When a comment is sent the following request is made: http POST...

야놀자 - 전국 모텔/호텔/펜션/게하 숙박 예약 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 야놀자 - 전국 모텔/호텔/펜션/게하 숙박 예약 published at the 'play' market has multiple vulnerabilities...