Stocks: Realtime Quotes Charts - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stocks: Realtime Quotes Charts published at the 'play' market has multiple vulnerabilities...

Prezi Cross Site Scripting

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1766 View Video: https://www.youtube.com/watch?v=QKSQvP5xGY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Dat...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Charts 4 PHP 1.2.3 Cross Site Scripting

Exploit Title: Charts 4 PHP 1.2.3 Cross Site Scripting Date: 2016/2/7 Researcher: 1N3 @CrowdShield - https://crowdshield.com Vendor Homepage: http://www.chartphp.com Software Link: http://www.chartphp.com Version: 1.2.3 CVE : N/A +- --=Description: Charts 4 PHP version 1.2.3 is vulnerable to...

Greenbone Networks Greenbone Security Assistant charts module cross-site scripting vulnerability

Greenbone Networks Greenbone Security Assistant GSA is a web interface that provides access to the OpenVAS service layer. charts is one of the charting modules. The charts module/opm URI in the Greenbone Networks GSA fails to adequately filter the 'aggregatetype' parameter in the getaggregat...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

PT-2016-4926

Name of the Vulnerable Software and Affected Versions Greenbone Security Assistant versions 6.0.0 through 6.0.7 Description A cross-site scripting issue exists due to insufficient input validation in the charts module. This allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2016-1926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

IBM Tealeaf Customer Experience Information Disclosure Vulnerability

IBM Tealeaf Customer Experience is a SaaS-based analytics solution for web and mobile applications from IBM USA. The solution helps clients understand and improve the overall user experience through the analysis of data, supporting rich visualization and data exploration through the adoption of...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

Code injection

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

PT-2016-3644

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions prior to 8.7.1.8814 IBM Tealeaf Customer Experience versions prior to 8.8.0.9026 IBM Tealeaf Customer Experience version 9.0.0 IBM Tealeaf Customer Experience version 9.0.0A IBM Tealeaf Customer...

CVE-2015-4989: Exposure of Sensitive Information to an Unauthorized Actor

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

CentOS 6 : libreoffice (CESA-2015:1458)

Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Moderate: Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update

Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Microsoft Word ptCount Element Uninitialized Memory Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...