silk-flowers-by-tapscotts.com XSS vulnerability

Vulnerable URL: http://www.silk-flowers-by-tapscotts.com/Shop/?search=pas%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

cspost.com XSS vulnerability

Open Bug Bounty ID: OBB-253539 Description| Value ---|--- Affected Website:| cspost.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reporting.flyingflowers.co.uk XSS vulnerability

Vulnerable URL: http://reporting.flyingflowers.co.uk/cgi-bin/msite?signup+a+0+0+0+0+0?emailaddress=%22%3E%3Cscript%20src=//www.openbugbounty.org/1.js%3E%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:...

Color by Numbers - Flowers - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Color by Numbers - Flowers published at the 'play' market has multiple vulnerabilities...

Flowers Photo Frames - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Flowers Photo Frames published at the 'play' market has multiple vulnerabilities...

Winter Flowers Live Wallpaper - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Winter Flowers Live Wallpaper published at the 'play' market has multiple vulnerabilities...

Spring Flowers Live Wallpaper - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Spring Flowers Live Wallpaper published at the 'play' market has multiple vulnerabilities...

CVE-2014-7774

The Herbs & Flowers Dictionary aka com.wHerbsNFlowersDictionary application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7746

The Fusion Flowers - Weddings aka com.triactivemedia.fusionweddings application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7746

The Fusion Flowers - Weddings aka com.triactivemedia.fusionweddings application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Session fixation

The Fusion Flowers - Weddings aka com.triactivemedia.fusionweddings application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7774

The Herbs & Flowers Dictionary aka com.wHerbsNFlowersDictionary application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7774

The Herbs & Flowers Dictionary Android app (com.wHerbsNFlowersDictionary) v0.1 exposes a vulnerability: it does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive information via crafted certificates. Root cause: missing certificate verif...

CVE-2014-7746

The CVE-2014-7746 entry concerns the Android app Fusion Flowers - Weddings (com.triactivemedia.fusionweddings). Affected component: the Android application’s SSL/TLS certificate validation. Root cause: it does not verify X.509 certificates presented by SSL servers, enabling man-in-the-middle atta...

CVE-2014-7774: Undefined Security Weakness

The Herbs & Flowers Dictionary aka com.wHerbsNFlowersDictionary application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7746: Undefined Security Weakness

The Fusion Flowers - Weddings aka com.triactivemedia.fusionweddings application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7554

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7554

CVE-2014-7554 concerns the Bouqs - Flowers Simplified Android app (com.bouqs.activity, version 1.8.4) failing to verify X.509 TLS certificates. This creates a vulnerability where man-in-the-middle attackers could spoof SSL servers and access sensitive information by presenting crafted certificate...

CVE-2014-7554: Undefined Security Weakness

The Bouqs - Flowers Simplified aka com.bouqs.activity application 1.8.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...