EUVD-2014-4975

Malware in sbrugna...

affacturage.labanquepostale.fr XSS vulnerability

Vulnerable URL: https://www.affacturage.labanquepostale.fr/popupindispo/indispo.asp?plages=%3C/script%3E%3Cimg src=x onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:55 GMT Vulnerability type:| XSS Vulnerabili...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

Design/Logic Flaw

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076

The CVE concerns the La Banque Postale Android app before version 3.2.6. The root cause is that the app does not prevent a component of another application from launching an activity, enabling an attacker to retrieve sensitive cached banking information via crafted intents (demonstrated by the dr...

CVE-2014-5076: Exposure of Sensitive Information to an Unauthorized Actor

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...