CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

CVE-2016-1000135

The connected template confirms a Cross-Site Scripting (XSS) vulnerability in WordPress HDW Video Gallery plugin versions 1.2 and earlier, exploitable via mychannel.php (HDW Tube plugin). Successful exploitation allows arbitrary script execution in a user’s browser, potentially enabling session h...

CVE-2016-1000134

WordPress HDW Video Gallery = 1.3, which contains the fix. No additional exploit details are provided in the supplied documents.

WordPress HDW Tube Plugin <= 1.2 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability via /hdw-tube/mychannel.php file. Solution Update the plugin...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist=""...

London Tube Assistant - SQLite database found, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application London Tube Assistant published at the 'play' market has multiple vulnerabilities...

London Tube Map - External URLs, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application London Tube Map published at the 'play' market has multiple vulnerabilities...

Tube Map London Underground - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Tube Map London Underground published at the 'play' market has multiple vulnerabilities...

Tube Map London Underground - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tube Map London Underground published at the 'play' market has multiple vulnerabilities...

Tube Mp3 Music Player - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tube Mp3 Music Player published at the 'play' market has multiple vulnerabilities...

DU Tube – Best Video Explorer - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application DU Tube – Best Video Explorer published at the 'play' market has multiple vulnerabilities...

Music Play Tube - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Music Play Tube published at the 'play' market has multiple vulnerabilities...

tube-xhamster.com Open Redirect vulnerability

Vulnerable URL: http://tube-xhamster.com/cgi-bin/crtr/out.cgi?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:12 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

tube-wire-coil-fair.com XSS vulnerability

Vulnerable URL: http://tube-wire-coil-fair.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5858914 Google Pagerank...

WordPress LB Tube Video Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress LB Tube Video Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Videos Tube 2.0 SQL Injection / XSS / Shell Upload

Videos Tube 2.0 / || / / / KnocKout, Septemb0x , BARCOD3 , UnDeRTaKeR / /\ /\ \ \ \ | / \ / Turkey / \ | \ \ / // / \ / / / / Software info |Web App. : Videos Tube |Price : FREE |Version : 2.0, updated the lastest version. |Software: http://www.phpscriptlerim.com/ucretsiz/videos-tube.html...

Information disclosure

The Pakan Ken Tube aka com.PakanKen application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7441

CVE-2014-7441 affects the Pakan Ken Tube (com.PakanKen) Android app version 0.1. The app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. The NVD entry reports a CVSS v2 base ...

CVE-2014-7441

The Pakan Ken Tube aka com.PakanKen application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...