CVE-2014-9772

Removed by vendor...

CVE-2014-9772: Improper Neutralization of Input During Web Page Generation

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting XSS filter via hex-encoded characters...

Asphalt Xtreme: Offroad Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Asphalt Xtreme: Offroad Racing published at the 'play' market has multiple vulnerabilities...

Camly photo editor & collages - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Camly photo editor & collages published at the 'play' market has multiple vulnerabilities...

PONS School Library - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PONS School Library published at the 'play' market has multiple vulnerabilities...

1000 Follower intsa Kosovo - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 Follower intsa Kosovo published at the 'play' market has multiple vulnerabilities...

PT-2017-10376

Name of the Vulnerable Software and Affected Versions Pivotal Spring Security versions 3.2.0 through 3.2.9 Pivotal Spring Security versions 4.0.x through 4.1.3 Pivotal Spring Security version 4.2.0 Description An issue was discovered in Pivotal Spring Security where it does not consider URL path...

Cross-site Scripting (XSS)

jquery-migrate is vulnerable to Cross-site Scripting XSS. jquery-migrate uses code similar to $location.hash to select an ID value encoded on the page. However, an attacker can create a cross-site scripting injection by using a string similar to and run code to steal user data...

던파조선 커뮤니티 (게임뉴스/커뮤니티) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 던파조선 커뮤니티 게임뉴스/커뮤니티 published at the 'play' market has multiple vulnerabilities...

Yandex.Flights - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Flights published at the 'play' market has multiple vulnerabilities...

Яндекс.Район - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Яндекс.Район published at the 'play' market has multiple vulnerabilities...

Sonic Dash - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Sonic Dash published at the 'play' market has multiple vulnerabilities...

1000 follower insta Brazil - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 1000 follower insta Brazil published at the 'play' market has multiple vulnerabilities...

100 follower trick tips - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 100 follower trick tips published at the 'play' market has multiple vulnerabilities...

Free Followers Plus - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Free Followers Plus published at the 'play' market has multiple vulnerabilities...

Nissan SmartCar - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Nissan SmartCar published at the 'play' market has multiple vulnerabilities...

FeaturePoints: Free Gift Cards - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FeaturePoints: Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Infiniti Sense - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Infiniti Sense published at the 'play' market has multiple vulnerabilities...

Kia Remoto - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kia Remoto published at the 'play' market has multiple vulnerabilities...

CVE-2016-6845

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...