10 matches found
tomser-vip.com Cross Site Scripting vulnerability OBB-2317444
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VIP.com Cross-Site Request Forgery Vulnerability
VIP.com application for IOS and Android is an online shopping application based on IOS and Android platforms by China Vipshop Information Technology Company. A security vulnerability exists in the VIP.com application for IOS and Android based platforms. A remote attacker can leverage a rogue acce...
zencondos-vip.com XSS vulnerability
Open Bug Bounty ID: OBB-591097 Description| Value ---|--- Affected Website:| zencondos-vip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
expresscondos-vip.com XSS vulnerability
Open Bug Bounty ID: OBB-588065 Description| Value ---|--- Affected Website:| expresscondos-vip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Authentication flaw
The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...
CVE-2017-13127
The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...
CVE-2017-13127
The CVE-2017-13127 issue affects the VIP.com mobile application (iOS and Android) and is described as allowing remote attackers to obtain sensitive information and hijack user authentication through a rogue Wi‑Fi access point enabling a man‑in‑the‑middle attack. Public records (NVD and CNVD) cons...
CVE-2017-13127
The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...
CVE-2017-13127: Exposure of Sensitive Information to an Unauthorized Actor
The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...