5884 matches found
Weather Street Style - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Weather Street Style published at the 'play' market has multiple vulnerabilities...
Cloudera HUE Session cookies stored in the database
User session cookies are stored in the database. Combined with the vulnerability related to configuration file which is world readable, it is possible to spoof a user across the entire cluster launching jobs and browsing the datalake, without having to crack password hashes. Cookies are stored in...
CVE-2017-8074
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
PT-2017-18102
Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108E version 1.0 TP-Link TL-SG108E firmware 1.1.2 Build 20141017 Rel.50749 Description A remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. Recommendations For TP-Link...
Money Manager Expense & Budget - Base64 encoded String, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Money Manager Expense & Budget published at the 'play' market has multiple vulnerabilities...
Spendee - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Spendee published at the 'play' market has multiple vulnerabilities...
Toshl Finance Budget & Expense - Base64 encoded String, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities
HackApp vulnerability scanner discovered that application Toshl Finance Budget & Expense published at the 'play' market has multiple vulnerabilities...
Home Bookkeeping Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Home Bookkeeping Lite published at the 'play' market has multiple vulnerabilities...
Fedora 25 : mediawiki (2017-3fb95ed01f)
T109140 T122209 Special:UserLogin and Special:Search allow redirect to interwiki links. CVE-2017-0363, CVE-2017-0364 - T144845 XSS in SearchHighlighter::highlightText when $wgAdvancedSearchHighlighting is true. CVE-2017-0365 - T125177 API parameters may now be marked as 'sensitive' to keep their...
Cross site scripting
Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...
CVE-2017-7188: Improper Neutralization of Input During Web Page Generation
Zurmo 3.1.1 Stable allows a Cross-Site Scripting XSS attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse...
Eye4 - Base64 encoded String, Customized SSL, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Eye4 published at the 'play' market has multiple vulnerabilities...
Auralux: Constellations - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Auralux: Constellations published at the 'play' market has multiple vulnerabilities...
PeersTV — бесплатное онлайн ТВ - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application PeersTV — бесплатное онлайн ТВ published at the 'play' market has multiple vulnerabilities...
My Talking Tom - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application My Talking Tom published at the 'play' market has multiple vulnerabilities...
RSA SecurID Software Token - Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application RSA SecurID Software Token published at the 'play' market has multiple vulnerabilities...
VMware Browser - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application VMware Browser published at the 'play' market has multiple vulnerabilities...
CVE-2017-7443
apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad regular expression...
