1709 matches found
reservations.airtickets.com XSS vulnerability
Open Bug Bounty ID: OBB-150978 Description| Value ---|--- Affected Website:| reservations.airtickets.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Lothian Buses M-Tickets - Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Lothian Buses M-Tickets published at the 'play' market has multiple vulnerabilities...
VGN Fahrplan & Tickets - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application VGN Fahrplan & Tickets published at the 'play' market has multiple vulnerabilities...
ZVV-Tickets - Customized SSL, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application ZVV-Tickets published at the 'play' market has multiple vulnerabilities...
PostBus - Timetable & Tickets - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application PostBus - Timetable & Tickets published at the 'play' market has multiple vulnerabilities...
Captain Train: train tickets - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Captain Train: train tickets published at the 'play' market has multiple vulnerabilities...
BK® Tickets - External URLs, SD-card access, SQLite database found vulnerabilities
HackApp vulnerability scanner discovered that application BK® Tickets published at the 'play' market has multiple vulnerabilities...
6 Charged for Hacking Lottery Terminals to Produce More Winning Tickets
Police have arrested and charged six people with crimes linked to hacking Connecticut state lottery terminals in order to produce more winning tickets than usual. Prosecutors say all the six suspects are either owners or employees of retail stores that produced a much higher number of winning...
Fedora 23 : mod_nss-1.0.12-1.fc23 (2015-c76c1c84cf)
Update to upstream 1.0.12 Fixes CVE-2015-5244 Add support for SNI Add RenegBufferSize option Add support for TLS Session Tickets RFC 5077 For full list of changes see https://fedorahosted.org/modnss/wiki/Releases modnss-1.0.12-1.fc23 - Update to upstream 1.0.12 Note that Tenable Network Security...
Oracle: Security Advisory (ELSA-2014-1652)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zendesk: CSV Excel Macro Injection Vulnerability in export customer tickets
Scenario: An attacker creates a name as =AND21 and creates a ticket. When a team member clicks export as csv and opens it instead of seeing =AND21 they see TRUE. This means that the cell is active. An attacker could basically attack makes a ticket, use -2+3+cmd|' /C calc'!E1 and could execute...
events.ksn.com.eventful.com Open Redirect vulnerability
Vulnerable URL: http://events.ksn.com.eventful.com/tickets/redirect?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 05.10.2015 Latest check for patch:| 05.10.2015 10:45 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
CVE-2015-4537
Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive...
Hardcoded credentials
Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive...
CVE-2015-5485
Cross-site scripting XSS vulnerability in the Event Import page import-eventbrite-events.php in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "error" parameter to wp-admin/edit.php...
WordPress Plugin Eventbrite Tickets Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Eventbrite Tickets. The vulnerability stems from a failur...
The Events Calender: Eventbrite Tickets 3.9.6 Cross Site Scripting
Details ================ Software: The Events Calendar: Eventbrite Tickets Version: 3.9.6 Homepage: https://theeventscalendar.com/product/wordpress-eventbrite-tickets/ Advisory report:...
OpenSSL: Race condition handling NewSessionTicket
A race condition was found in the session handling code of OpenSSL. This issue could possibly cause a multi-threaded TLS/SSL client using OpenSSL to double free session ticket data and crash...
