apps.ohiodnr.gov XSS vulnerability

Vulnerable URL: https://apps.ohiodnr.gov/water/maptechs/wellogs/app/road.asp?Road=LOCKWOOD=SUMMIT=1"...

CVE-2017-9561

The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

My NJ Client APP has an overstepping vulnerability

My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. There is a vulnerability in the authentication mechanism of the social security payment query function of My Nanjing Client APP, which allows an attacker to view the...

Stored Cross-Site Scripting Vulnerability in FitTime App

FitTime is a mobile fitness app with its own copyrighted fitness videos taught by real people throughout. FitTime App suffers from a stored cross-site scripting vulnerability due to the program failing to adequately filter user-supplied input. An attacker can exploit the vulnerability to plant...

CVE-2017-5919

The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

fipart.com XSS vulnerability

Vulnerable URL: https://www.fipart.com/inventory-app/index.php?idCompany=3174 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1793139 VIP website status:| No Check fipart.com SSL...

CVE-2016-6550

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Uber Hack lets anyone find Unlimited Promo Codes for Free Uber Rides

An Independent Security Researcher from Egypt has discovered a critical vulnerability in Uber app that could allow an attacker to brute force Uber promo code value and get valid codes with the high amount of up to $25,000 for more than one free rides. Mohamed M.Fouad has discovered a "promo codes...

CVE-2016-4575

Cross-site scripting XSS vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before...

1941 Frozen Front - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 1941 Frozen Front published at the 'play' market has multiple vulnerabilities...

Durak - Suspicious files, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Durak published at the 'play' market has multiple vulnerabilities...

Learn Spanish - Speak Spanish - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Learn Spanish - Speak Spanish published at the 'play' market has multiple vulnerabilities...

The vulnerability of the iOS operating system, allowing a hacker to read arbitrary files

The vulnerability of the Mobile Backup module in the Photos app of the iOS operating system is related to deficiencies in path name restrictions for the catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files through a specially crafted path name...

One after another: the VTech user data leaked, and was broke two major vulnerability-vulnerability warning-the black bar safety net

Recently, the world's largest infant electronic learning product Maker Vtech（Vtech）is aeration 4 8 0 million parents and 6 4 0 million for children information disclosure. ! Due to this event, Vtech its share price fell to a year low. Followed, with security researchers in their innotab Max produ...

AndroidVTS: Android cell phone vulnerabilities the defect detection App-vulnerability warning-the black bar safety net

Android users now have a light weight cell phone vulnerabilities the defect inspection tool to help users check their phone if there is a corresponding vulnerability. The tool is called Android VTS Vulnerability Test Suite, is Nownature released an app of the application tool. Android VTS is base...

Than the gourd baby is also scary Baidu full system APP SDK vulnerability – WormHole wormhole vulnerability analysis report-vulnerability warning-the black bar safety net

Than the gourd baby is also scary Baidu full system APP SDK vulnerability – WormHole wormhole vulnerability analysis report APP vulnerability discovery,Android reverse analysis bydroidsec ”You can’t have a back door in the software because you can’t have a back door that's only for the good guys....

Takeaway O2O App security analysis: the App vulnerability assessment platform technical details-vulnerability warning-the black bar safety net

In the mobile Internet and O2O tide swept under, the takeaway market is gradually entering the white-collar field, at BAT three giants throwing money to cultivate the market, white-collar workers have to change eating habits. As long as it is imprisoned in the white collar does not substantially ...

Multiple Cross-Site Request Forgery Vulnerabilities at Synametrics Technologies

A cross-site request forgery vulnerability in the mngUsers operation in Synametrics Technologies /app allows remote attackers to construct a malicious URI, trick a user into parsing it, and can target the user context to perform malicious actions...

CVE-2014-7735

The Dr. Sheikh Adnan Ibrahim aka com.amitaff.adnanIbrahim application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7786

The English Football Magazine aka com.magzter.englishfootball application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...