1715 matches found
CVE-2015-0904
The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack...
CVE-2015-0904
The CVE-2015-0904 issue affects the Android app “Restaurant Karaoke SHIDAX” (versions 1.3.3 and earlier). The root cause is failure to validate SSL server certificates, which enables a man-in-the-middle attack that can expose sensitive data in encrypted communications. Multiple sources in the con...
CVE-2015-0904
The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack...
restaurant-online.biz XSS vulnerability
Vulnerable URL: http://www.restaurant-online.biz/roo/phpmailer/testscript/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6084940 VIP website status:| No Check restaurant-online.bi...
Zomato: Restaurant payment information leakage
An endpoint was leaking banking information of restaurant owners: Bank Name, Account number etc. Thanks @nbsp for reporting this...
Restaurant Partner App - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Restaurant Partner App published at the 'play' market has multiple vulnerabilities...
Zomato - Restaurant Finder - Certificates or keys found, Corrupted files, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Zomato - Restaurant Finder published at the 'play' market has multiple vulnerabilities...
Deliveroo: Restaurant Delivery - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Deliveroo: Restaurant Delivery published at the 'play' market has multiple vulnerabilities...
Zomato: xss found in zomato
while i was testing with your site i found a xss at add the restraunt option steps to reproduce 1 login to zomato 2 goto add restraunt 3 in the name feild add any xss payload 4complete it the restraunt will be sent for verification to the verification team and the xss payload will also be sent to...
Friday Squid Blogging: Squid and Chips
The excellent Montreal chef Marc-Olivier Frappier, of Joe Beef fame, has created a squid and chips dish for Brit & Chips restaurant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
megeve.com XSS vulnerability
Vulnerable URL: http://megeve.com/en/winter/revitalize-yourself/restaurants/?clearsearch=1/!/custom/custom/lang/en//pageno/en/pageno/clearsearch/1/pageno/4/pageno/4/3/pageno/1/pageno/2/pageno/4/"'--!=1=1/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...
Zomato: Reflected XSS in Zomato Mobile - category parameter
Hi there. I have found a reflected XSS in Zomato.com mobile. This XSS affects mobile users of Zomato. Steps to reproduce: 1. Go to Zomato.com and change your user agent to mobile iPhone/Android user agent 2. Go to a certain restaurant/place and their photos e.g. site:...
Yelp: User can be fooled to Bookmark any restaurant by clickjacking
In this report https://hackerone.com/reports/214087 you people said the clickjacking issue is fixed but i have found another issue of clickjacking. Using clickjacking attacker can fooled an user to bookmark n numbers of restuarants. I am attaching a PoC video , watch the video...
Yelp: ClickJacking in editing business name
SUMMARY: Hope you guys are doing great. I found clickjacking vulnerability while updating business page.One of the endpoints which is vulnerable to clickjacking is https://www.yelp.com/bizattribute?bizid=RIyHYSf3lyJcFb4El9T4tQ . Clickjacking User Interface redress attack, UI redress attack, UI...
FIN7 Evolution and the Phishing LNK
FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...
Dr. Panda Restaurant Asia - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Dr. Panda Restaurant Asia published at the 'play' market has multiple vulnerabilities...
restaurant-rodez.brit-hotel.fr XSS vulnerability
Vulnerable URL: http://restaurant-rodez.brit-hotel.fr/mapframe.php?lat=;...
restaurant-landivisiau.brit-hotel.fr XSS vulnerability
Vulnerable URL: http://restaurant-landivisiau.brit-hotel.fr/mapframe.php?lat=;...