Dating Pro Genie 2015.7 - Cross-Site Request Forgery

Dating Pro Genie 2015.7 - Cross-Site Request Forgery Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 20...

Dating Pro Genie 2015.7 - Cross-Site Request Forgery

Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 2016 Vendor Patch: February 29, 2016 Public Disclosure:...

Dating Pro Genie 2015.7 Cross Site Request Forgery

Advisory ID: HTB23294 Product: Dating Pro Vendor: DatingPro Vulnerable Versions: Genie 2015.7 and probably prior Tested Version: Genie 2015.7 Advisory Publication: February 10, 2016 without technical details Vendor Notification: February 10, 2016 Vendor Patch: February 29, 2016 Public Disclosure:...

Multiple Cross-Site Request Forgery Vulnerabilities in Dating Pro

Dating Pro has multiple cross-site request forgery vulnerabilities. Due to the lack of authentication of the HTTP request sources "/admin/ausers/index" script and "/admin/notifications/settings/" script, an unauthenticated remote attacker can create a specially malicious web page, trick a logged-...

Security researchers find HIV Dating APP vulnerability, the reverse is the vendor with the AIDS threat-vulnerability warning-the black bar safety net

! Around the world websites and applications to encourage researchers noted that their system vulnerabilities, but one designed for HIV-positive users of online Dating app developer with HIV a threat to security researchers not to notify them of the program any security vulnerabilities. HIV...

civilservicedating.co.uk XSS vulnerability

Vulnerable URL: http://civilservicedating.co.uk/registration/?a=0="r3nw4"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hardcoded credentials

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The CVE-2014-6760 entry concerns the Android app Harem Thief Dating (com.haremthief.haremthief) , version 1.2.1. The root cause is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle (MITM) attacks to spoof servers and access sensitive inform...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5820

The OkCupid Dating com.okcupid.okcupid application 3.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5804

The Mail.Ru Dating aka ru.mail.love application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jack'd - Gay Chat & Dating aka mobi.jackd.android application 1.9.0a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The OkCupid Dating com.okcupid.okcupid application 3.4.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mail.Ru Dating aka ru.mail.love application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5820

The CVE refers to the OkCupid Dating Android app (package com.okcupid.okcupid) version 3.4.6, where the client does not verify X.509 certificates from SSL servers. This weakens TLS authentication and enables MITM attackers to spoof servers and access sensitive information via a crafted certificat...

CVE-2014-5804

The Mail.Ru Dating aka ru.mail.love application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5804

The CVE-2014-5804 entry concerns the Mail.Ru Dating (ru.mail.love) Android app version 3, which fails to verify X.509 certificates when connecting to SSL servers. This certificate validation flaw enables man-in-the-middle attackers to spoof legitimate servers and potentially exfiltrate sensitive ...

CVE-2014-5592

The Free Dating Heart COL aka com.choiceoflove.dating application 2.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Christian Dating Cafe aka com.christiancafe.mobile.android application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...