704 matches found
Get the passenger and the owner of the personal information? This note Uber logical vulnerability“combination punches”worth a look-vulnerability warning-the black bar safety net
! Uber recently finally opened up its vulnerability reward program, and encourage white-hat gate expand on the Uber online service vulnerability mining. Please with FreeBuf xiaobian together look at this a few logical loopholes the formation of“combination of Boxing” it. Information collected...
H.I.S. Coupon Lite - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application H.I.S. Coupon Lite published at the 'play' market has multiple vulnerabilities...
COUPIES Coupons im Supermarkt - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application COUPIES Coupons im Supermarkt published at the 'play' market has multiple vulnerabilities...
Udemy: Able to view others' gifts on /gift/share URL, giftId is predictable, and easy to manipulate
I recently purchased a gift for a friend, and noticed the share URL gift ID was simply numeric. I managed to access other people's gifts simply by incrementing and decrementing the ID by 2, I was able to verify that the price was dropped to "Free", regardless of if I was logged in or not, and I w...
shop.redbullmobile.at XSS vulnerability
Vulnerable URL: http://shop.redbullmobile.at/is-bin/INTERSHOP.enfinity/WFS/Mobilkom-A1Shop-Site/deAT/-/EUR/CouponHandlingView-AddCoupon?submitcouponID=Einl%c3%b6sen=alle-handys=OverviewPage=Gutscheincode%2520eingebenalert/XSSPOSED/...
vistaprint.sg Open Redirect vulnerability
Vulnerable URL: http://www.vistaprint.sg/add-coupon.aspx?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 15.03.2017 Latest check for patch:| 15.03.2017 17:20 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 26395...
QiboCMS地方门户系统文件coupon/s.php存在SQL注入漏洞
No description provided by source...
齐博地方门户系统 v2.5 /coupon/s.php SQL注入漏洞
No description provided by source...
Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload
The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for PoC "; $uploadfile="/var/www/s.pht"; $ch =...
Csv2WPeC Coupon <= 1.1 - Unauthenticated Remote File Upload
The code in csv2wpecCouponFileUpload.php does not properly sanitize user input, it checks the file mime-type for type x-php but this can be tricked when using the short code for "; $uploadfile="/var/www/s.pht"; $ch =...
Dropbox: Race condition when redeeming coupon codes
Hello, there is a race condition when redeeming coupon codes in https://www.dropbox.com/coupons. Basically, it enables me to reuse one coupon code many times. Here are the steps to reproduce: 1. Get a coupon code. I bought mine on fiverr. 2. Go to https://www.dropbox.com/coupons and enter your co...
CVE-2014-5891
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5891
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5891
The CVE-2014-5891 entry concerns the SnipSnap Coupon App (com.snipsnap.snipsnapapp) for Android v1.1.11, where the app does not verify X.509 certificates from SSL servers. The underlying issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certifi...
CVE-2014-5891: Undefined Security Weakness
The SnipSnap Coupon App aka com.snipsnap.snipsnapapp application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6876
Name of the Vulnerable Software and Affected Versions SnipSnap Coupon App version 1.1.11 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...
jaspreetchahals-coupons-lite <= 2.1 - XSS in ZeroClipboard
The JC Coupon WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...
Free PHP photo gallery script Remote Command Execution Vulnerability
Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested o...
PHP Coupon Script 6.0 - (bus) Blind SQL Injection Vulnerability
No description provided by source. == |Script: PHP Coupon Script |Version: 6.0 |Dork: PHP Coupon Script v. 6.0 |Link: http://www.couponscript.com == |Author: BorN To K!LL - h4ck3r |Contact: [email protected] == |3xploit: /index.php?page=viewbus&bus=Blind-Injection |3xample:...