EUVD-2014-5883

Malware in sbrugna...

dekra-solutions.com Cross Site Scripting vulnerability OBB-3754675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dekra-akademie.hu Cross Site Scripting vulnerability OBB-1335216

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

dekra-safety-web.eu XSS vulnerability

Open Bug Bounty ID: OBB-632754 Description| Value ---|--- Affected Website:| dekra-safety-web.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dekra-norisko.fr XSS vulnerability

Vulnerable URL: https://www.dekra-norisko.fr/ventes-flash/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 147073 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

DEKRA Mobil - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DEKRA Mobil published at the 'play' market has multiple vulnerabilities...

DEKRA Used Car Report - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DEKRA Used Car Report published at the 'play' market has multiple vulnerabilities...

CVE-2014-5996

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5996

CVE-2014-5996 affects the Android app “DEKRA Used Car Report” (com.dekra.maengelreport) version 3.0.0, where X.509 certificate validation is not performed for SSL connections. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

CVE-2014-5996

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...