14 matches found
EUVD-2014-6981
Malware in sbrugna...
columbusfreecarinsurancequotes.com Cross Site Scripting vulnerability OBB-1423554
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
texascheapcarinsurance.com Cross Site Scripting vulnerability OBB-1372884
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
carinsurancequotesmi.info Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180373 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Lojack’d: Pwning Smart vehicle trackers
This research is by @evstykas with help from @Yekki1 and @TheKenMunroShow. Many car insurers insist that smart trackers are fitted to high end vehicles. In the event of theft, the car can be tracked and recovered. Probably the most well-known is LoJack, also known as Tracker in Europe. We also...
On TikTok, Teens Meme Life360, the Safety App Ruining Their Summer
Parents can use Life360 to track their teen’s location in real time. The company can use that data to sell car insurance...
mazdacarinsurance-dealer.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-631614 Description| Value ---|--- Affected Website:| mazdacarinsurance-dealer.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mpi.mb.ca XSS vulnerability
Vulnerable URL: https://www.mpi.mb.ca/en/Reg-and-Ins/Insurance/Trip/Rental/Pages/rentalcarinsurance.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
daciacarinsurance.co.uk XSS vulnerability
Vulnerable URL: https://www.daciacarinsurance.co.uk/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...
CVE-2014-7102
The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7102
The CVE-2014-7102 vulnerability affects the Car Insurance Quote Comparison (com.seopa.quotezone) Android app, version 2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information...
CVE-2014-7102: Undefined Security Weakness
The Car Insurance Quote Comparison aka com.seopa.quotezone application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7770
Name of the Vulnerable Software and Affected Versions Car Insurance Quote Comparison aka com.seopa.quotezone version 2.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...