LocalTapiola: Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi

Hello, Some strange account information modification is ongoing when intercepting and making small modifications to requests in 'investment section'. Login to portal and go to buy shares https://verkkopalvelu.tapiola.fi/jb2/ltvr/purchases or similar and pic 2025 A shares, intercept requests and...

aspiranturi.ru XSS vulnerability

Vulnerable URL: http://aspiranturi.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

apparatnaya.ru XSS vulnerability

Vulnerable URL: http://apparatnaya.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

attestacija.ru XSS vulnerability

Vulnerable URL: http://attestacija.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

artriti.ru XSS vulnerability

Vulnerable URL: http://artriti.ru/buy/rent.php?domain= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

origin-m.bestbuy.com XSS vulnerability

Vulnerable URL: http://origin-m.bestbuy.com/bbyMobileStoreLocator/index.php?lat=26.2436599=-80.2660484=yes=33071%22%3E%3Cscript%3Econfirm%28/xssposed/%29%3C/script%3E=yes Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

digitalwallpaper.net XSS vulnerability

Vulnerable URL: http://digitalwallpaper.net/buy.php?item=SCRIPT%3E%22%3E%27%3E%3E%3C/title%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

TinyRise 最新版注射获取敏感信息

简要描述： TinyRise 最新版注射获取敏感信息 详细说明： 主要问题出在filterclass.php: public static function text$str $config = HTMLPurifierConfig::createDefault; $cachedir=Tiny::getPath'cache'."/htmlpurifier/"; if!fileexists$cachedir File::mkdir$cachedir; $config = HTMLPurifierConfig::createDefault; //配置 缓存目录...

Coinbase: Credit Card Validation Issue

Hi Coinbase, I'm not sure if this counts as a bug, but it definitely counts as a vulerability. The issue is in your credit card verification for instant purchases. The system does not or rarely check the validity of a credit card after it is added. This allows me to make instant buy purchases,...

CVE-2014-5983

The CVE-2014-5983 entry concerns the Android app Threadflip: Buy, Sell Fashion (com.threadflip.android) version 1.1.11, which does not verify X.509 certificates from SSL servers. The underlying issue is a lack of certificate validation, enabling man-in-the-middle attackers to spoof servers and ob...

Ecmall several SQL injection vulnerability-vulnerability warning-the black bar safety net

Search, find/app/sellergroupbuy. app. php there are 6 injection: Are the files under the drop,start,finished,desc,cancel,logfunction in the id parameter To finished , for example: function finished $id = empty$GET'id' ? 0 : $GET'id';//id parameter is not filtered if !$ id...

CVE-2014-5757

The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Books aka com.wBooksForSale application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The CVE-2014-5736 entry concerns the Android app Buy Coins (com.wBuyCoins) version 0.62.13364.24150. The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, allowing MITM attackers to spoof SSL servers and read sensitive information via a crafted ce...