Fashion City 2 - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fashion City 2 published at the 'play' market has multiple vulnerabilities...

Bypassing Ebay XSS Protection to launch XSS by Nirmal Dahal

This is a small proof of concept regarding “Reflective Cross-Site Scripting R-XSS ” which I had found on Ebay. I am not an active participant in bug bounty programs, but one day I had finished all my office works so I was surfing on Facebook and received a message from my brother, Samir, asking f...

Authenticated WMI Exec Via Powershell

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/powershell' require 'msf/core/post/windows/priv' require 'msf/core/exploit/powershell/dotnet' class MetasploitModule...

Banka Koper Wave2Pay - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Banka Koper Wave2Pay published at the 'play' market has multiple vulnerabilities...

Perchang - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Perchang published at the 'play' market has multiple vulnerabilities...

The Trail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application The Trail published at the 'play' market has multiple vulnerabilities...

Case Clicker 2 - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Case Clicker 2 published at the 'play' market has multiple vulnerabilities...

Shadow Fight 2 - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Fight 2 published at the 'play' market has multiple vulnerabilities...

Билеты на поезд - Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Билеты на поезд published at the 'play' market has multiple vulnerabilities...

Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection AMP feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages du...

Grammar - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Grammar published at the 'play' market has multiple vulnerabilities...

ABN AMRO Mobiel Bankieren - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application ABN AMRO Mobiel Bankieren published at the 'play' market has multiple vulnerabilities...

Kamacaca - Premios Gratis - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Kamacaca - Premios Gratis published at the 'play' market has multiple vulnerabilities...

Login CAPTCHA Bypass Vulnerability in AVTECH Device Cookies

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. AVTECH device cookie has login authentication code bypass vulnerability.AVTECH device use base64 encoded username and passwo...

DenizTrader - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DenizTrader published at the 'play' market has multiple vulnerabilities...

Clean Master (Boost & AppLock) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Clean Master Boost & AppLock published at the 'play' market has multiple vulnerabilities...

Suicide Squad: Special Ops - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Suicide Squad: Special Ops published at the 'play' market has multiple vulnerabilities...

KPMG VR - Base64 encoded String, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application KPMG VR published at the 'play' market has multiple vulnerabilities...

Wrike - Project Management - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wrike - Project Management published at the 'play' market has multiple vulnerabilities...

Dashlane: Password Manager App - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dashlane: Password Manager App published at the 'play' market has multiple vulnerabilities...