EUVD-2014-4975

Malware in sbrugna...

affacturage.labanquepostale.fr XSS vulnerability

Vulnerable URL: https://www.affacturage.labanquepostale.fr/popupindispo/indispo.asp?plages=%3C/script%3E%3Cimg src=x onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:55 GMT Vulnerability type:| XSS Vulnerabili...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

Design/Logic Flaw

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076

The CVE concerns the La Banque Postale Android app before version 3.2.6. The root cause is that the app does not prevent a component of another application from launching an activity, enabling an attacker to retrieve sensitive cached banking information via crafted intents (demonstrated by the dr...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076: Exposure of Sensitive Information to an Unauthorized Actor

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

PT-2014-6268

Name of the Vulnerable Software and Affected Versions La Banque Postale application versions prior to 3.2.6 Description The issue allows attackers to obtain sensitive cached banking information via crafted intents. This can be demonstrated using the drozer framework, which shows how an activity c...