Finance Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finance Manager published at the 'play' market has multiple vulnerabilities...

Cash Organizer - finance - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cash Organizer - finance published at the 'play' market has multiple vulnerabilities...

Alzex Personal Finance - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Alzex Personal Finance published at the 'play' market has multiple vulnerabilities...

PT-2017-16871

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Financial Consolidation version 10.0.0.1933 Description A cross-site scripting XSS issue exists in the help component, allowing remote attackers to inject arbitrary web script or HTML via a GET request to the...

CVE-2017-6061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Securit...

drazbe.finance.si XSS vulnerability

Vulnerable URL: https://drazbe.finance.si//'"--!confirmOPENBUGBOUNTY...

Finance Website Script SQL Injection

Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL...

Finance Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web:...

Finance Website Script - SQL Injection

Finance Website Script - SQL Injection Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Finance Website Script - SQL Injection

Vulnerability: SQL Injection Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Finance Website Script Script Buy Now: http://www.popularclones.com/products/Finance-Website-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL...

tw.screener.finance.yahoo.net XSS vulnerability

Vulnerable URL: https://tw.screener.finance.yahoo.net/future/aa05?sid=111'="%3E%3Csvg onload=confirmOPENBUGBOUNTY%3E=1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

Sparkasse (Bank) - Service Security Advisory WB021 2016

Document Title: =============== Sparkasse Bank - Service Security Advisory WB021 2016 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1959 Download PDF: https://www.vulnerability-lab.com/resources/documents/spk-sec-WB021.pdf Vulnerability Magazine:...

Android security of Https man in the middle attacks vulnerability-vulnerability warning-the black bar safety net

0X01 overview ! HTTPS, is anetwork securitytransmission Protocol, usingSSL/TLSto the data packet to be encrypted,to providenetworkserverauthentication, the exchange of data protection of privacy andintegrity is. Man in the middle attacks, Man-in-the-middle attack, abbreviation: the MITM refers to...

Huawei UMA Information Disclosure Vulnerability

Huawei UMA Unified Maintenance and Audit is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA suffers from an information disclosure vulnerability that could be...

factoring.nordeafinance.com XSS vulnerability

Open Bug Bounty ID: OBB-175873 Description| Value ---|--- Affected Website:| factoring.nordeafinance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Finsaver. Finance Manager. - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Finsaver. Finance Manager. published at the 'play' market has multiple vulnerabilities...

Toshl Finance Web Application Cross Site Scripting

Exploit Title: Toshl Finance Web Application - Multiple Areas of Stored Cross-Site Scripting XSS Date: 6/24/16 Exploit Author: Brett DeWall Exploit Author Twitter: @xbadbiddyx Exploit Author Blog: http://xbadbiddyx.tumblr.com Vendor Homepage: https://toshl.com/app/ Version: Latest commit Contacte...

financedublin.com XSS vulnerability

Vulnerable URL: http://www.financedublin.com/unsubscribe.php?eid=%22%3E%3Cimg%20src=%22x%22%20onerror=alert%28/openbugbounty/%29%3E.png Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

SQL Injection Vulnerability in the Comprehensive Information Portal System of Nanjing Normal University Finance Department

Nanjing Normal University Finance Department comprehensive information portal system is a set of financial management platform. SQL injection vulnerability exists in Nanjing Normal University Finance Department Comprehensive Information Portal System, which can be exploited by attackers to obtain...

Goodbudget: Budget & Finance - Exported components, External URLs, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Goodbudget: Budget & Finance published at the 'play' market has multiple vulnerabilities...