CVE-2017-5918

The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5918

The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5918

The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5918: Improper Certificate Validation

The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-16758

Name of the Vulnerable Software and Affected Versions Banco de Costa Rica BCR Movil app version 3.7 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL...

pt.gites-de-france.com XSS vulnerability

Vulnerable URL: https://pt.gites-de-france.com/lista.html/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check pt.gites-de-france.com SSL connection:| Grade...

chambredhotes.gites-de-france.com XSS vulnerability

Vulnerable URL: https://chambredhotes.gites-de-france.com/liste.html/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check chambredhotes.gites-de-france.com...

ecotourisme.gites-de-france.com XSS vulnerability

Vulnerable URL: https://ecotourisme.gites-de-france.com/liste.html/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ecotourisme.gites-de-france.com SSL...

nl.gites-de-france.com XSS vulnerability

Vulnerable URL: https://nl.gites-de-france.com/list.html/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check nl.gites-de-france.com SSL connection:| Grade:...

m945.de XSS vulnerability

Open Bug Bounty ID: OBB-230203 Description| Value ---|--- Affected Website:| m945.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssl247.de XSS vulnerability

Vulnerable URL: https://www.ssl247.de/kb/search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1497834 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted...

bw96.de XSS vulnerability

Open Bug Bounty ID: OBB-229742 Description| Value ---|--- Affected Website:| bw96.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

berni24.de XSS vulnerability

Vulnerable URL: https://www.berni24.de/products.html;jsessionid=F6D72CF881332F5CE3E1B11F78B3E6CF?formname=searchform&errorpage=error.html&filtersmartsearch=x&postfilterhersteller=&filtermenu=x=-searchrank=x&filtersuchkat=&filterktext=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E...

nethosting24.de XSS vulnerability

Vulnerable URL: http://www.nethosting24.de/skripte/whois/whois.php Details: Description| Value ---|--- Patched:| Yes, at 03.05.2017 Latest check for patch:| 03.05.2017 11:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1510579 VIP website status:| No Check...

truckscout24.de XSS vulnerability

Vulnerable URL: http://www.truckscout24.de/search/ger/list.asp?country=D'-confirmOPENBUGBOUNTY-'==ger=type=1=dateofinsertiondesc====1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

starbase-10.de XSS vulnerability

Vulnerable URL: http://www.starbase-10.de/vld/main.php?cmd=browsecat='" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1795796 VIP website status:| No Che...

webspace-discount-24.de XSS vulnerability

Open Bug Bounty ID: OBB-226493 Description| Value ---|--- Affected Website:| webspace-discount-24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian Security Advisory DSA 3832-1 (icedove - security update)

Multiple security issues have been found in Thunderbird, which may may lead to the execution of arbitrary code or information leaks. With this update, the Icedove packages are de-branded back to the official Mozilla branding. With the removing of the Debian branding the packages are also renamed...

reitshop24.de XSS vulnerability

Open Bug Bounty ID: OBB-225666 Description| Value ---|--- Affected Website:| reitshop24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

leboncoin.fr XSS vulnerability

Open Bug Bounty ID: OBB-225564 Description| Value ---|--- Affected Website:| leboncoin.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...