Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Baby Phone - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby Phone published at the 'play' market has multiple vulnerabilities...

ABC for kids – learn Alphabet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC for kids – learn Alphabet published at the 'play' market has multiple vulnerabilities...

Hearthstone Heroes of Warcraft - BSD license, Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearthstone Heroes of Warcraft published at the 'play' market has multiple vulnerabilities...

Mastercard Premium Selection - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mastercard Premium Selection published at the 'play' market has multiple vulnerabilities...

Updated phpmyadmin package fixes CVE-2016-5099

In phpMyAdmin before 4.4.15.6, a specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page CVE-2016-5099...

AirWatch Tunnel - Base64 encoded String, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Tunnel published at the 'play' market has multiple vulnerabilities...

AirWatch Container - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Container published at the 'play' market has multiple vulnerabilities...

Self XSS

PMASA-2016-16 Announcement-ID: PMASA-2016-16 Date: 2016-05-25 Updated: 2016-05-26 Summary Self XSS Description A specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page. Updated to include CVE ID...

Medium: nspr, nss-util, nss, nss-softokn

Issue Overview: A use-after-free flaw was found in the way NSS handled DHE DiffieHellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A remote attacker could send a specially crafted handshake message that, when parsed by an application linked against NSS,...

CVE-2015-8863

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...

CVE-2015-8863

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...

Heap overflow

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...

CVE-2015-8863

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...

CVE-2015-8863

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...

CVE-2015-8863

CVE-2015-8863 affects the jq JSON processor via an off-by-one error in tokenadd() within jv_parse.c, causing a heap-based buffer overflow that can crash jq or, in some advisories, allow arbitrary code execution when processing long JSON numbers. Public details indicate vulnerable versions include...

WiFi Master Key - by wifi.com - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WiFi Master Key - by wifi.com published at the 'play' market has multiple vulnerabilities...

iKeyboard - emoji, emoticons - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application iKeyboard - emoji, emoticons published at the 'play' market has multiple vulnerabilities...

Maverick: GPS Navigation - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Maverick: GPS Navigation published at the 'play' market has multiple vulnerabilities...

Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20160425)

The following packages have been upgraded to a newer upstream version: nss 3.21.0, nspr 4.11.0. Security Fixes : - A use-after-free flaw was found in the way NSS handled DHE Diffie- Hellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A remote attacker cou...