EUVD-2014-7446

Malware in sbrugna...

convenios.ugtandalucia.es Cross Site Scripting vulnerability OBB-3727395

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

andalucia.org Cross Site Scripting vulnerability OBB-3171853

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

andalucia.org Cross Site Scripting vulnerability OBB-1492346

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2014-7575

The eBiblio Andalucia aka com.bqreaders.reader.ebiblioandalucia application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The eBiblio Andalucia aka com.bqreaders.reader.ebiblioandalucia application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7575

The eBiblio Andalucia aka com.bqreaders.reader.ebiblioandalucia application 1.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7575

The CVE-2014-7575 entry concerns the Android app eBiblio Andalucia (com.bqreaders.reader.ebiblioandalucia) version 1.6.5, which does not verify X.509 certificates from SSL servers. This weakness allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cer...