azypages.com XSS vulnerability

Open Bug Bounty ID: OBB-673907 Description| Value ---|--- Affected Website:| azypages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PrestaShop < 1.6.1.19 - BlowFish ECD Privilege Escalation Exploit

Exploit for php platform in category web applications !/usr/bin/env python3 PrestaShop = 1.6.1.19 Privilege Escalation Charles Fol 2018-07-10 See https://ambionics.io/blog/prestashop-privilege-escalation The condition for this exploit to work is for an employee to have the same password as a...

PrestaShop 1.6.1.19 - BlowFish ECD Privilege Escalation

PrestaShop 1.6.1.19 - BlowFish ECD Privilege Escalation !/usr/bin/env python3 PrestaShop = 1.6.1.19 Privilege Escalation Charles Fol 2018-07-10 See https://ambionics.io/blog/prestashop-privilege-escalation The condition for this exploit to work is for an employee to have the same password as a...

affordablegranitenh.com XSS vulnerability

Vulnerable URL: http://www.affordablegranitenh.com/Granite-Countertop-Coupons.asp?color=1/-///'/"//--...

DesiDime Coupons & Offers - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DesiDime Coupons & Offers published at the 'play' market has multiple vulnerabilities...

MC Hosting Coupons Cross-Site Request Forgery Vulnerability

MC Hosting Coupons is a PHP script for managing coupons. A cross-site request forgery vulnerability exists in MC Hosting Coupons. An attacker can exploit the vulnerability to trick users into clicking on it to obtain sensitive user information...

MC Hosting Coupons Script - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author...

MC Hosting Coupons Script - Cross-Site Request Forgery

MC Hosting Coupons Script - Cross-Site Request Forgery Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author...

MC Hosting Coupons Cross Site Request Forgery

Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktan...

MC Hosting Coupons Script - Cross-Site Request Forgery

Vulnerability: Cross-Site Request Forgery Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Hosting Coupons Script Script Buy Now: http://microcode.ws/product/mc-hosting-coupons-php-script/3881 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Ian Dunn: Multiple XSS in Camptix Event Ticketing Plugin

Hi, As discussed in 151561 submitting the report here. I have got some more bugs in Camptix Event Ticketing plugin. Well, the first one is a ticket page xss caused by the Ticket Title And the second one is kind of self-xss, caused by also the Ticket title of the plugin but in the coupons page. I...

Apple Patents Technology to remotely disable your iPhone Camera at Concerts

Here's something you'll not like at all: Apple has been awarded a patent for technology that would prevent you from snapping pictures and shooting videos with your iPhone or iPad at places or events, like concerts or museums, where it might be prohibited or inappropriate. The patent, granted on...

PAYBACK - Coupons & Gutscheine - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PAYBACK - Coupons & Gutscheine published at the 'play' market has multiple vulnerabilities...

scondoo Cashback Deals Coupons - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application scondoo Cashback Deals Coupons published at the 'play' market has multiple vulnerabilities...

Rossmann - Coupons & Angebote - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Rossmann - Coupons & Angebote published at the 'play' market has multiple vulnerabilities...

NuBON Coupons & Haushaltsbuch - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NuBON Coupons & Haushaltsbuch published at the 'play' market has multiple vulnerabilities...

sctimesapps.com XSS vulnerability

Vulnerable URL: http://sctimesapps.com/coupons/omniture.php?pagetitle=...

SQL Injection Vulnerability in Microservices Intelligent Platform of Yue Liang Legendary Technology Co.

The main business of EVERLIGHT LEGEND TECHNOLOGY CO., LTD. is industry application software, and the main customers are telecommunication operators, electric power and aviation. WeChat Service Intelligent Platform is one of the operating platforms of Yue Liang Legend Technology Co. A SQL injectio...

CVE-2015-4358

The vulnerability CVE-2015-4358 affects Ubercart Discount Coupons module for Drupal 6.x-1.x prior to 6.x-1.8. The issue is an XSS in unspecified administration pages due to insufficient sanitization of user-supplied text, exploitable by remote authenticated users with certain permissions to injec...

CVE-2015-4358

Cross-site scripting XSS vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms...