CVE-2014-7035

The CVE-2014-7035 entry concerns The Harmonizers Planet Android app (2.3.4, package uk.co.pixelkicks.fifthharmony). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

planet-undies.es XSS vulnerability

Open Bug Bounty ID: OBB-50356 Description| Value ---|--- Affected Website:| planet-undies.es Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Information disclosure

The 5SOS Family Planet aka uk.co.pixelkicks.fivesos application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6694

The CVE-2014-6694 issue affects the Android app “5SOS Family Planet” (package uk.co.pixelkicks.fivesos) version 2.3.4, where the app does not verify X.509 certificates from SSL servers. This pluggable weakness enables man-in-the-middle attackers to spoof servers and obtain sensitive information v...

CVE-2014-6694

The 5SOS Family Planet aka uk.co.pixelkicks.fivesos application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6651

The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6651

The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6651

The CVE-2014-6651 entry concerns the Planet of the Vapes Forum Android app (version 3.7.9) which does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This is documented across several sources (NVD...

Planet FPS-1101 Cross-site Scripting Vulnerability

No description provided by source. GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network environment. With the embedded we...

Planet 2.0 HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36392/info Planet is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...

WP Planet <= 0.1 - Unauthenticated Reflected XSS

The last time it was checked the plugin was still affected and had been closed. PoC https://www.example.com/wp-content/plugins/wp–planet/rss.class/scripts/magpiedebug.php?url=...

Planet FPS-1101 Cross-site Scripting Vulnerability

Exploit for hardware platform in category web applications GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network...

Planet FPS-1101 - Cross-Site Scripting

Planet FPS-1101 - Cross-Site Scripting GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network environment. With the embedde...

Planet FPS-1101 Cross Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network environment. With the embedded web server, the FPS-1101 is...

Planet FPS-1101 - Cross-Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network environment. With the embedded web server, the FPS-1101 is...

Planet 1.3 Cross Site Request Forgery

Exploit Title: Planet 1.3 - CSRF Add Admin Account Date:20 -06-2010 Author: G0D-F4Th3r Software Link: http://php.femtolayer.com/planet13/ Version: 1.3 Tested on: http://php.femtolayer.com/planet13/ " Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Planet 1.1 Cross Site Request Forgery

Exploit Title: Planet 1.1 - CSRF Add Admin Account Date: 17-06-2010 Author: G0D-F4Th3r Software Link: http://php.femtolayer.com/planet11/ Version: 1.1 Tested on: http://php.femtolayer.com/planet11/ /cp/security.php?do=admins" Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And A...

Planet 1.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Planet 1.1 - CSRF Add Admin Account Date: 17-06-2010 Author: G0D-F4Th3r Software Link: http://php.femtolayer.com/planet11/ Version: 1.1 Tested on: http://php.femtolayer.com/planet11/ /cp/security.php?do=admins" Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And A...

Planet Script 1.x - idomains.php Cross-Site Scripting

Planet Script 1.x - idomains.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40203/info Planet Script is prone to a cross-site scripting vulnerability because the it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...