mobile.linde-gase.de XSS vulnerability

Open Bug Bounty ID: OBB-634423 Description| Value ---|--- Affected Website:| mobile.linde-gase.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mail.ru: XSS via message subject - mobile application

XSS in message compose window on forwarding message with crafted subject / sender name / content in mobile application for android...

Security Bulletin: IBM Worklight and IBM Mobile Foundation application authenticity bypass (CVE-2014-0888)

Summary IBM Worklight and IBM Mobile Foundation application authenticity verification can be bypassed under certain conditions. Vulnerability Details CVEID: CVE-2014-0888 DESCRIPTION: The application authenticity feature in IBM Worklight and IBM Mobile Foundation enables the Worklight server to...

Redis CVE-2018-12453 Remote Denial Of Service Vulnerability

Description Redis is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service condition. Redis version prior to 5.0 are vulnerable. Technologies Affected Redhat Ceph Storage 3 Redhat Mobile Application Platform 4 Redis Redis 2.8.21 Redis Red...

mobil.barclaycard.de XSS vulnerability

Open Bug Bounty ID: OBB-625159 Description| Value ---|--- Affected Website:| mobil.barclaycard.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)

Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs : OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-too...

Mobile Application Hacking Diary Ep.2

Mobile Application Hacking Diary Ep.2 |=--------------------------------------------------------------------=| |=------------= Mobile Application Hacking Diary Ep.2=--------------=| |=------------------------= 18 February 2018 =----------------------=| |=----------------------= By CWH Underground...

Nootka Command Injection Vulnerability

Nootka is a mobile application for learning classical music notation. A security vulnerability exists in Nootka 1.4.4 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary operating system commands...

Photos in Wifi 1.0.1 - Path Traversal

Document Title: =============== Photos in Wifi 1.0.1 iOS - Path Traversal Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1600 Release Date: ============= 2018-01-04 Vulnerability Laboratory ID VL-ID: ===================================...

Wickr Inc - App Clock & Message Deletion Glitch P2

Document Title: =============== Wickr Inc - App Clock & Message Deletion Glitch P2 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2107 Document: https://www.vulnerability-lab.com/resources/documents/2107.rar Vulnerability Magazine:...

Wickr Inc - App Clock & Message Deletion Glitch P2

Document Title: =============== Wickr Inc - App Clock & Message Deletion Glitch P2 References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2107 Document: https://www.vulnerability-lab.com/resources/documents/2107.rar Vulnerability Magazine:...

Mail.ru: XSS на e.mail.ru в мобильном приложении!

Cross application scripting via message content in mobile mail application. Vulnerability affected a limited number of external domains connected in Mail.Ru mail application. Users of Mail.Ru mailboxes and largest mailbox providers were not affected, no access to confidential data was possible as...

CVE-2015-5248

CVE-2015-5248 is a reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. Connected CNVD-2017-33047 describes a related remote attacker could trigger arbitrary code execution by submitting a crafted request that causes code execution when a user opens a...

CVE-2015-5248

Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform...

Mail.ru: XSS в письме, в теле письма.

Здравствуйте! XSS срабатывает на e.mail.ru, m.mail.ru, light.mail.ru и в мобильном приложении. Уязвимость присутствует в параметрах стилей, в ...здесь... срабатывает, если экранировать символы. Рабочий вектор здесь одиночные бэкслэш, в примере ещё ниже хостинг обрезал до одиночных: i\\ Отправка...

Important: Red Hat Security Advisory: Red Hat Mobile Application Platform security update

An update is now available for Red Hat Mobile Application Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

The Hutchison App has a logical design flaw

HeSeries is a comprehensive mobile service app developed by Chengdu HeSeries Network Technology Co. There is a logic design vulnerability in the HeSeries app. An attacker can log in to any account and reset any registered user's password by blasting the registration verification code and password...

Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability

Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...

Star Queen Aliyun OSS credentials have information leakage vulnerability

Star Queen APP is a social platform based on beauty and beautification manicure plastic surgery and bodybuilding and other industries. AliCloud Object Storage Service OSS is a massive, secure and highly reliable cloud storage service provided by AliCloud. After the star AliCloud OSS credentials...

Xinhua News Agency Ali Cloud OSS credentials have information leakage vulnerability

Xinhua News Agency Client is the mobile portal and new media flagship of the national news agency, the leader of China's new media national team, the unified entrance of China's party and government client clusters and the comprehensive information service platform. Aliyun Object Storage Service...