6471 matches found
Gratipay: Markdown parsing issue enables insertion of malicious tags
Markdown tags and event handlers can be used to load malicious URLs in user's profile statement. Here is the payload that when entered in user's profile statement leads to the following HTML: Payload: www.attacker.com/malicious.exe Resulting HTML: "html": "www.attacker.com/malicious.exe\n" See th...
mts centar - Customized SSL, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application mts centar published at the 'play' market has multiple vulnerabilities...
Bank SMS - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Bank SMS published at the 'play' market has multiple vulnerabilities...
auth.as token - Customized SSL, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application auth.as token published at the 'play' market has multiple vulnerabilities...
EFF Alerts - External URLs, MIT license, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application EFF Alerts published at the 'play' market has multiple vulnerabilities...
Marble Access - Certificates or keys found, Corrupted files, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Marble Access published at the 'play' market has multiple vulnerabilities...
Citi Mobile - Certificates or keys found, Dangerous filesystem permissions, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Citi Mobile published at the 'play' market has multiple vulnerabilities...
HackerOne: profile cover can also load external URL's
Hi, I have to option to change my cover background https://hackerone.com/programname/edit. When I insert 360e0e url'http://www.google.com' as background "color" it will make a connection to http://www.google.com If IE is used. I can't save it so it won't affect any other people but it doesn't loo...
Mandriva Linux Security Advisory : python-django (MDVSA-2014:179)
"Updated python-django packages fix security vulnerabilities : These releases address an issue with reverse generating external URLs CVE-2014-0480 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Securit...
