Animal Hide & Seek Christmas - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Animal Hide & Seek Christmas published at the 'play' market has multiple vulnerabilities...

Multiplayer Hide and Seek 2016 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Multiplayer Hide and Seek 2016 published at the 'play' market has multiple vulnerabilities...

Hide Photos, Video-Hide it Pro - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Hide Photos, Video-Hide it Pro published at the 'play' market has multiple vulnerabilities...

Pic Lock- Hide Photos & Videos - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pic Lock- Hide Photos & Videos published at the 'play' market has multiple vulnerabilities...

Vault - Hide Photos/App Lock - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Vault - Hide Photos/App Lock published at the 'play' market has multiple vulnerabilities...

Vault-Hide SMS, Pics & Videos - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Vault-Hide SMS, Pics & Videos published at the 'play' market has multiple vulnerabilities...

2d9nrrPmNF1O7wd

A Remote Browser's Agent XSS is a piece of software that allows a remote "operator" to control a browser as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "XSS" software is usually associated with criminal or malicious activity...

How to Hide Applications in StoreFront 2.5

This article describes how to configure StoreFront resource filter to hide certain resources by type or keyword...

WordPress Hide My WP Plugin <= 4.53 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

Hide My WP <= 4.53 - Stored-Cross Site Scripting (XSS)

An attacker can make a fake attack attempt which will be logged, and can inject JavaScript. curl --referer 'you are using bad filtering for input ript alert"XSS here" ript; :; ;' http://example.com...

Hide My WP <= 4.51.1 - Stored Cross-Site Scripting (XSS)

An attacker can make a fake attack attempt, with a JavaScripting payload, which will be logged by the plugin, resulting in XSS. The attacker also can spoof their IP address in the logs by setting the X-FORWARDED-FOR header. PoC curl --referer '...

WordPress Hide My WP Plugin <= 4.51.1 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

WordPress Plugin WPS Hide Login Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.WPS Hide Login is one of the plug-ins to change the URL of the login form. A cross-site request forgery vulnerability exis...

WordPress WPS Hide Login Plugin <= 1.0 - CSRF

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

WPS Hide Login 1.0 - CSRF

CSRF security issue when saving option value in single site and multisite mode...

[ MDVSA-2014:126 ] phpmyadmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:126 http://www.mandriva.com/en/support/security/ Package : phpmyadmin Date : July 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

Hardcoded credentials

The Vault-Hide SMS, Pics & Videos aka com.netqin.ps application 5.0.14.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4349

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a 1 hide or 2 unhide action...

DEBIAN-CVE-2014-4349

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name that is improperly handled after a 1 hide or 2 unhide action...

[Process Magic v2.0] Command-line Tool to Hide Windows Application or Launch New Process in Hidden Mode

Process Magic is the command-line tool to Hide any Windows application or launch new application in Hidden or Invisible mode. In addition to hiding any Windows process, it also allows you to Unhide any previously Hidden application. Note that it hides the application by hiding its main window. So...