m.fr.ford.be XSS vulnerability

Open Bug Bounty ID: OBB-156501 Description| Value ---|--- Affected Website:| m.fr.ford.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ford.com.tr XSS vulnerability

Open Bug Bounty ID: OBB-156498 Description| Value ---|--- Affected Website:| ford.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

intpublish-couk.engine.ford.com XSS vulnerability

Vulnerable URL: http://intpublish-couk.engine.ford.com/cs/ContentServer?pagename=UKENENGInE%2FLayoutDLBing=UKENENGInE=Page=1204903584770=morpeth=FF%27;alert%28/OPENBUGBOUNTY/%29;//=UKEN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS...

ford.no XSS vulnerability

Open Bug Bounty ID: OBB-156497 Description| Value ---|--- Affected Website:| ford.no Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ford.de XSS vulnerability

Vulnerable URL: http://www.ford.de/AktuelleAktionen/FordFlatrate/mdp=f1205014384002'" Details: Description| Value ---|--- Patched:| Yes, at 08.12.2016 Latest check for patch:| 08.12.2016 16:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31486 VIP website...

Ford Service - BSD license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ford Service published at the 'play' market has multiple vulnerabilities...

Alan Ford - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Alan Ford published at the 'play' market has multiple vulnerabilities...

shop.ford.com XSS vulnerability

Vulnerable URL: http://shop.ford.com/build/fiesta/2015%27-alert%28/XSSPOSED/%29-%27/?lang=en=false%27-alert%28/XSSPOSED/%29-%27=1〈=en=config/chooseyourpath/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:36 GMT Vulnerability type:| XSS...

showroom.ford.com XSS vulnerability

Vulnerable URL: http://www.showroom.ford.com/FDShowroom.jsp?=1%27-alert%28/XSSPOSED/%29-%27〈=en=config Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2256...

performanceparts.ford.com XSS vulnerability

Vulnerable URL: http://www.performanceparts.ford.com/parts/search.asp?q=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

johnsonbrothersford.com XSS vulnerability

Vulnerable URL: http://www.johnsonbrothersford.com/pictures/viewlarge.php?picturename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

autotrader.ca XSS vulnerability

Vulnerable URL: http://www.autotrader.ca/cars/ford/escape/?hprc=True=True=New-Used'--...

Trey Ford on Mapping the Internet with Project Sonar

Trey Ford from Project Sonar describes the group’s initiative at Kaspersky’s Security Analyst Summit. The Rapid7 service scans public networks for applications, software, and hardware, then analyzes that cache of information to learn trends and gain insight on common vulnerabilities. Trey Ford...

CVE-2014-6884

The Ford Credit Account Manager aka com.fordcredit.accountmanager application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Ford Credit Account Manager aka com.fordcredit.accountmanager application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6884

The Ford Credit Account Manager aka com.fordcredit.accountmanager application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6884

CVE-2014-6884 affects the Ford Credit Account Manager app (com.fordcredit.accountmanager) for Android v1.0.1, where TLS connections do not verify X.509 certificates, enabling MITM attackers to spoof servers and exfiltrate sensitive data per the vulnerability description.

Scenes from Black Hat USA 2013

!More from Wednesday’s Legal Access Panel Briefinghttps://media.threatpost.com/wp-content/uploads/sites/103/2013/08/07043123/panel.j...

Broadcom BCM4325 / BCM4329 Denial Of Service

Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid Incredible Samsung Spica Acer Liquid Motorol...

Broadcom BCM4325 BCM4329 Devices - Denial of Service

Broadcom BCM4325 BCM4329 Devices - Denial of Service Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 H...