KUKU - Schedule Instagram Post - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application KUKU - Schedule Instagram Post published at the 'play' market has multiple vulnerabilities...

cesanjosedepalmaritico.guaranda-sucre.gov.co XSS vulnerability

Vulnerable URL: http://www.cesanjosedepalmaritico.guaranda-sucre.gov.co/es/buscar?alsvbuscar=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E=Buscar Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products See resolution section for impacted versions HP Intelligent Management Center iMC See resolution section for impacted versions VCX Products 9.8.19 CVSS...

Design/Logic Flaw

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...

gruporadialcontinental.com XSS vulnerability

Vulnerable URL: http://gruporadialcontinental.com/buscar.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

dalgopol.org XSS vulnerability

Vulnerable URL: http://www.dalgopol.org/parts.php?categoryid=44"'--! Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 17:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7671000 VIP website status:| No Check...

Banco Santander Mexico SA Supermovil app for iOS Information Disclosure Vulnerability

Banco Santander Mexico SA Supermovil app for iOS is an iOS-based mobile application from Banco Santander Mexico SA with quick access to manage your bank account, manage balances, pay bills and send money. A security vulnerability exists in versions 3.5 through 3.7 of the Banco Santander Mexico SA...

Electronic Funds Source Mobile Driver Source app for iOS Security Vulnerability

Electronic Funds Source EFS Mobile Driver Source app for iOS is an iOS based EFS card management app. A security vulnerability exists in version 2.5 of the EFS Mobile Driver Source app for iOS, which is caused by the program failing to validate an X.509 certificate on the server side of an SSL...

Code injection

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

website-php.com XSS vulnerability

Vulnerable URL: http://www.website-php.com/en/tutorials/textbox/textbox-09.html/"--!"/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6480869 VIP website status:| No Check...

regione.puglia.it XSS vulnerability

Vulnerable URL: http://www.regione.puglia.it/index.php?page=pressregione=display"'--!=22001 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 102325 VIP website status:| Yes Check regione.puglia.it SSL connection:|...

crazyoldmoms.com XSS vulnerability

Vulnerable URL: http://crazyoldmoms.com/tour/?nats=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2443449 VIP website status:| No Check crazyoldmoms.com SSL connection:| Grade: F Coordinated Disclosure Timelin...

imp.hosting365.ie Open Redirect vulnerability

Vulnerable URL: http://imp.hosting365.ie/horde/util/go.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

ssl.mecca.ca Open Redirect vulnerability

Vulnerable URL: https://ssl.mecca.ca/horde/util/go.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

blog.latinasheat.com XSS vulnerability

Vulnerable URL: http://blog.latinasheat.com/?nats=t" onmouseover=alert/OPENBUGBOUNTY/;MC4wLjExMy4xMTQuMC4wLjAuMC4w Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

blog.hairypussyporno.com XSS vulnerability

Vulnerable URL: http://blog.hairypussyporno.com/?nats=t" onmouseover=alert/OPENBUGBOUNTY/;MC4wLjExMy4xMTQuMC4wLjAuMC4w Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

jonathannewman.com XSS vulnerability

Vulnerable URL: https://jonathannewman.com/?s=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6027523 VIP website status:| No Check jonathannewman.com SSL connection:| Grade:...

izhevsk.ru5.info XSS vulnerability

Vulnerable URL: http://izhevsk.ru5.info//search.php?txt=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

ridersbylee.com XSS vulnerability

Vulnerable URL: http://ridersbylee.com/riproductlist.php?gender=Misses=1/-///%27/%22//--%3E%3C/script%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3ETops Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2913243 VIP...

codelooker.com XSS vulnerability

Vulnerable URL: http://www.codelooker.com/searchs.asp?kw=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Ezt=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 494868 VIP website...