MobilKincstár - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application MobilKincstár published at the 'play' market has multiple vulnerabilities...

New Relic: Html injection in monitor name textbox

Hello guys, Details: Encoded image tag via HTML-Encoding is executed in Monitot failed email Payload: Plain text: Encoded: PoC: F100855 Remediation: Before sending an email - make sanitization / filtering / encoding of whole special characters. If you have any question, plz let me know Thanks, St...

百度手机输入法 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 百度手机输入法 published at the 'play' market has multiple vulnerabilities...

Andujar Guia Turistica - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Andujar Guia Turistica published at the 'play' market has multiple vulnerabilities...

Skype For Business 2013 User Enumeration

Exploit Title: Skype for Business 2013 user enumeration timing attack Date: 2016-06-08 Exploit Author: nyxgeek Vendor Homepage: https://www.microsoft.com Version: Skype for Business 2013 Skype for Business 2013 is vulnerable to a timing attack that allows for username enumeration When Skype/Lync ...

CVE-2016-3687

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

Open redirect

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on SSO, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the...

CVE-2016-4574

Off-by-one error in the appendutf8value function in the DN decoder dn.c in Libksba before 1.3.4 allows remote attackers to cause a denial of service out-of-bounds read via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356...

Caref - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Caref published at the 'play' market has multiple vulnerabilities...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Baby Phone - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby Phone published at the 'play' market has multiple vulnerabilities...

ABC for kids – learn Alphabet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC for kids – learn Alphabet published at the 'play' market has multiple vulnerabilities...

Hearthstone Heroes of Warcraft - BSD license, Base64 encoded String, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Hearthstone Heroes of Warcraft published at the 'play' market has multiple vulnerabilities...

Mastercard Premium Selection - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mastercard Premium Selection published at the 'play' market has multiple vulnerabilities...

Updated phpmyadmin package fixes CVE-2016-5099

In phpMyAdmin before 4.4.15.6, a specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page CVE-2016-5099...

AirWatch Tunnel - Base64 encoded String, Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Tunnel published at the 'play' market has multiple vulnerabilities...

AirWatch Container - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application AirWatch Container published at the 'play' market has multiple vulnerabilities...

Self XSS

PMASA-2016-16 Announcement-ID: PMASA-2016-16 Date: 2016-05-25 Updated: 2016-05-26 Summary Self XSS Description A specially crafted attack could allow for special HTML characters to be passed as URL encoded values and displayed back as special characters in the page. Updated to include CVE ID...

Medium: nspr, nss-util, nss, nss-softokn

Issue Overview: A use-after-free flaw was found in the way NSS handled DHE DiffieHellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A remote attacker could send a specially crafted handshake message that, when parsed by an application linked against NSS,...

CVE-2015-8863

Off-by-one error in the tokenadd function in jvparse.c in jq allows remote attackers to cause a denial of service crash via a long JSON-encoded number, which triggers a heap-based buffer overflow...