Planet of Cubes : Multi Craft - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Planet of Cubes : Multi Craft published at the 'play' market has multiple vulnerabilities...

PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities

| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...

Little Planet's School - Water - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Little Planet's School - Water published at the 'play' market has multiple vulnerabilities...

Candy Planet Factory Chef - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Candy Planet Factory Chef published at the 'play' market has multiple vulnerabilities...

ABC Planet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC Planet published at the 'play' market has multiple vulnerabilities...

Planet Center Parcs - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Planet Center Parcs published at the 'play' market has multiple vulnerabilities...

planet radio - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application planet radio published at the 'play' market has multiple vulnerabilities...

Planet Clementoni - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Planet Clementoni published at the 'play' market has multiple vulnerabilities...

PLANET IP ICA-5350V LFI / XSS / CSRF / Bypass

Overview ======= Technical Risk: high Likelihood of Exploitation: medium Tested version: ICA-5350V/ICA- Credits: Discovered and researched by GT.Omaz from OrwellLabs Issues ===== I. Local File Inclusion II. Arbitrary file read/Authentication bypass III. Sensitive information disclosure IV...

planet-series.tv XSS vulnerability

Open Bug Bounty ID: OBB-97620 Description| Value ---|--- Affected Website:| planet-series.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-2026 Reflected Cross-Site Scripting (XSS) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2026 =================== "Reflected Cross-Site Scripting XSS" CWE-79 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated cross-platform developmen...

CVE-2014-2025 Remote Code Execution (RCE) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2025 =================== "Remote Code Execution RCE via Unrestricted File Upload" CWE-434 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated...

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2014-2026

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2014-2026

The CVE-2014-2026 entry concerns United Planet Intrexx Professional (5.2 prior to Online Update 0905; 6.x prior to Online Update 10). The vulnerability is a reflected Cross-Site Scripting (XSS) in the search functionality, allowing an attacker to inject arbitrary script/HTML via the request param...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The CVE-2014-7463 entry concerns the IM5 Fans Planet (Android) app version 2.3.1, which fails to verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry reports a CVSSv2...

Information disclosure

The Harmonizers Planet aka uk.co.pixelkicks.fifthharmony application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...