CVE-2024-29093

Cross-Site Request Forgery CSRF vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through = 1.01.3...

CVE-2024-29093

CVE-2024-29093 is a CSRF vulnerability in the Builder for WooCommerce reviews shortcode — ReviewShort. The issue affects ReviewShort versions from unspecified start to 1.01.3. The CVSS base score is 4.3 (Medium) with network attack vector and user interaction required. Connected sources provide t...

conradconsulting.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-597254 Description| Value ---|--- Affected Website:| conradconsulting.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

produktinfo.conrad.de XSS vulnerability

Open Bug Bounty ID: OBB-454671 Description| Value ---|--- Affected Website:| produktinfo.conrad.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

produktinfo.conrad.com XSS vulnerability

Vulnerable URL: http://www.produktinfo.conrad.com/index.php?type=〈==EN=aze%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CONRAD (Universal) - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CONRAD Universal published at the 'play' market has multiple vulnerabilities...

CVE-2014-4884

The Conrad Hotel aka com.wConradHotel application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Conrad Hotel aka com.wConradHotel application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4884

The CVE-2014-4884 entry concerns the Android application Conrad Hotel (com.wConradHotel) version 0.1, which does not verify X.509 certificates when establishing TLS connections. This improper certificate validation enables man-in-the-middle attackers to spoof SSL servers and capture sensitive inf...

CVE-2014-4884

The Conrad Hotel aka com.wConradHotel application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Ubuntu 4.10 : php4 vulnerability (USN-66-2)

Ubuntu Security Notice USN-66-1 described a circumvention of the 'openbasedir' restriction by using the cURL module. Adam Conrad discovered that the fix from USN-66-1 still allowed to bypass this restriction with certain variants of path specifications. In addition this update fixes the crash of...