bene-inox.com Cross Site Scripting vulnerability OBB-3938906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bene-inox.com Cross Site Scripting vulnerability OBB-3851144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bene-fit.app Cross Site Scripting vulnerability OBB-3342575

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2014-7439

The CVE-2014-7439 entry concerns the Android app bene+ odmeny a slevy (cz.gemoney.bene.android) v1.2.3, which does not verify X.509 certificates when connecting to SSL servers. This permits MITM攻击 where an attacker can spoof servers and access sensitive information via a crafted certificate. The ...

CVE-2014-7439: Undefined Security Weakness

The bene+ odmeny a slevy aka cz.gemoney.bene.android application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7997

Name of the Vulnerable Software and Affected Versions bene+ odmeny a slevy aka cz.gemoney.bene.android version 1.2.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...