Open Redirect

WordPress is vulnerable to open redirect attacks. It is possible because the library does not properly validate the external URL in wphttpreferer in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, allowing attackers to redirect users to a different website...

apis.dict.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-318863 Description| Value ---|--- Affected Website:| apis.dict.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Ooredoo Tv Go - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Ooredoo Tv Go published at the 'play' market has multiple vulnerabilities...

MR Recorder - Radio Streaming - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MR Recorder - Radio Streaming published at the 'play' market has multiple vulnerabilities...

Machine Liker - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Machine Liker published at the 'play' market has multiple vulnerabilities...

EXIMpay - Certificates or keys found, Dangerous filesystem permissions, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application EXIMpay published at the 'play' market has multiple vulnerabilities...

Insert Viewer - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Insert Viewer published at the 'play' market has multiple vulnerabilities...

eCare21 - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application eCare21 published at the 'play' market has multiple vulnerabilities...

EY GlobalOne - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application EY GlobalOne published at the 'play' market has multiple vulnerabilities...

MGASA-2016-0413 Updated drupal packages fix security vulnerability

Inconsistent name for term access query; information on taxonomy terms might have been disclosed to unprivileged users CVE-2016-9449. Confirmation forms allow external URLs to be injected CVE-2016-9451...

SmartPay - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application SmartPay published at the 'play' market has multiple vulnerabilities...

FC Krasnodar - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application FC Krasnodar published at the 'play' market has multiple vulnerabilities...

Tilt - Certificates or keys found, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Tilt published at the 'play' market has multiple vulnerabilities...

HiveTaxi DEMO - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application HiveTaxi DEMO published at the 'play' market has multiple vulnerabilities...

steelfm - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application steelfm published at the 'play' market has multiple vulnerabilities...

BookBox German - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application BookBox German published at the 'play' market has multiple vulnerabilities...

Fastest Painter - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fastest Painter published at the 'play' market has multiple vulnerabilities...

Juice and Jelly's Fruit Heroes - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Juice and Jelly's Fruit Heroes published at the 'play' market has multiple vulnerabilities...

Match Jong - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Match Jong published at the 'play' market has multiple vulnerabilities...

Guess the Drawing - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Drawing published at the 'play' market has multiple vulnerabilities...