EUVD-2014-6780

Malware in sbrugna...

Logic design flaws in Anju App

Anjuke APP is a domestic real estate rental and sale service platform. A logical design vulnerability exists in Anjuke APP. An attacker can exploit this vulnerability to consume server resources and cause denial of service by sending unlimited CAPTCHAs to cell phones...

fs.fang.anjuke.com XSS vulnerability

Vulnerable URL: http://fs.fang.anjuke.com/loupan/s?kw=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:56 GMT Vulnerability type:| XSS Vulnerability status:...

cq.fang.anjuke.com XSS vulnerability

Vulnerable URL: http://cq.fang.anjuke.com/loupan/s?kw=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:56 GMT Vulnerability type:| XSS Vulnerability status:...

CVE-2014-6902

The Anjuke aka com.anjuke.android.app application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anjuke aka com.anjuke.android.app application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6902

The Anjuke aka com.anjuke.android.app application 7.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6902

The CVE-2014-6902 entry concerns the Android app Anjuke (com.anjuke.android.app) version 7.1.7, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected...