JioChat: Free Video Call & SMS - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application JioChat: Free Video Call & SMS published at the 'play' market has multiple vulnerabilities...

Download Manager Pro FREE - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager Pro FREE published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

BusyBox Integer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the DHCP client udhcpc in BusyBox versions prior to 1.25.0. A remote attacker can exploit this vulnerability to cause...

Microsoft OneDrive - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Microsoft OneDrive published at the 'play' market has multiple vulnerabilities...

OANDA fxTrade for Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application OANDA fxTrade for Android published at the 'play' market has multiple vulnerabilities...

КиноПоиск - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application КиноПоиск published at the 'play' market has multiple vulnerabilities...

Scania Fleet - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Scania Fleet published at the 'play' market has multiple vulnerabilities...

Audubon Birds of North America - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Audubon Birds of North America published at the 'play' market has multiple vulnerabilities...

CVE-2014-9772

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

CVE-2014-9772

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

CVE-2014-9772

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

CVE-2014-9772

Removed by vendor...

CVE-2014-9772: Improper Neutralization of Input During Web Page Generation

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

Asphalt Xtreme: Offroad Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Asphalt Xtreme: Offroad Racing published at the 'play' market has multiple vulnerabilities...

Camly photo editor & collages - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Camly photo editor & collages published at the 'play' market has multiple vulnerabilities...

PONS School Library - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PONS School Library published at the 'play' market has multiple vulnerabilities...

1000 Follower intsa Kosovo - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Follower intsa Kosovo published at the 'play' market has multiple vulnerabilities...

PT-2017-10376

Name of the Vulnerable Software and Affected Versions Pivotal Spring Security versions 3.2.0 through 3.2.9 Pivotal Spring Security versions 4.0.x through 4.1.3 Pivotal Spring Security version 4.2.0 Description An issue was discovered in Pivotal Spring Security where it does not consider URL path...

Cross-site Scripting (XSS)

jquery-migrate is vulnerable to Cross-site Scripting XSS. jquery-migrate uses code similar to $location.hash to select an ID value encoded on the page. However, an attacker can create a cross-site scripting injection by using a string similar to and run code to steal user data...