CVE-2014-7376: Undefined Security Weakness

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Unfixed XSS vulnerability at www.steroids-pharma.com

Security researcher Xylitol, has submitted on 30/05/2010 a cross-site-scripting XSS vulnerability affecting www.steroids-pharma.com, which at the time of submission ranked 1005260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It i...