CVE-2014-7428

The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7428

The CVE-2014-7428 entry concerns the Android app “7725.com Three Kingdoms” (package com.platform7725.youai.jiejian), version 2.4, which does not verify X.509 certificates from SSL servers. This vulnerability enables man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-7428: Undefined Security Weakness

The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7988

Name of the Vulnerable Software and Affected Versions The 7725.com Three Kingdoms aka com.platform7725.youai.jiejian application version 2.4 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

bgtop100.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-51186 Description| Value ---|--- Affected Website:| bgtop100.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

u83.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-51091 Description| Value ---|--- Affected Website:| u83.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

leag1.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-50414 Description| Value ---|--- Affected Website:| leag1.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable UR...

ruforum.mt5.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-49997 Description| Value ---|--- Affected Website:| ruforum.mt5.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

netbest10.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-49923 Description| Value ---|--- Affected Website:| netbest10.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...

live800.com#注入一枚

简要描述： 0.0 详细说明： live800.com 注入一枚 http://www.szlive800.com/faq.asp?id=11 sql注入 ok 漏洞证明： 如上...

ad110.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-49594 Description| Value ---|--- Affected Website:| ad110.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable UR...

CVE-2014-5317

Cross-site scripting XSS vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5317

Cross-site scripting XSS vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5317

The CVE-2014-5317 issue affects the Php365 365 Links family: 365 Links (Ver.3.11 and earlier), 365 Links2 (Ver.3.11 and earlier), 365 Links+ (Ver.2.10 and earlier), and 365 Links2+ (Ver.2.10 and earlier). It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbi...

CVE-2014-5317: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1417

Multiple cross-site scripting XSS vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com...

Fedora 19 : php-5.5.16-1.fc19 (2014-9679)

21 Aug 2014, PHP 5.5.16 Core : - Fixed bug 67693 incorrect push to the empty array Tjerk - Fixed bug 67717 segfault in dnsgetrecord. CVE-2014-3597 Remi COM : - Fixed missing type checks in comeventsink Yussuf Khalil, Stas. Fileinfo : - Fixed bug 67705 extensive backtracking in rule regular...

indosatm2.com XSS vulnerability

Open Bug Bounty ID: OBB-48751 Description| Value ---|--- Affected Website:| indosatm2.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...