proveedores.davivienda.com Cross Site Scripting vulnerability OBB-3890858

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...

Davivienda Móvil - BSD license, Customized SSL, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Davivienda Móvil published at the 'play' market has multiple vulnerabilities...

Empresas Davivienda Móvil - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Empresas Davivienda Móvil published at the 'play' market has multiple vulnerabilities...