Lucene search
+L

618 matches found

hackapp
hackapp
added 2017/04/20 10:29 a.m.16 views

Zenmoney: expense tracker - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zenmoney: expense tracker published at the 'play' market has multiple vulnerabilities...

1.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2017/04/02 9:47 a.m.15 views

Harvest Time & Expense Tracker - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Harvest Time & Expense Tracker published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2016/12/19 11:34 a.m.24 views

Harvest: Unauthorised read Access to Expense Receipt of any user in the company(Vertical Privilege escalation)

Hi Team, Description : In Timesheet you have option for submitting your expense for the projects you are assigned. But Only Admin can view other user's Expenses and related receipts. But there is a request which gives a full size of expense receipt attached to the expenses. This request is...

0.2AI score
SaveExploits0
hackapp
hackapp
added 2016/11/30 4:9 p.m.25 views

My Wallet - Expense Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Wallet - Expense Manager published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
Hacker One
Hacker One
added 2016/07/20 2:45 p.m.24 views

Harvest: Cross-Site Request Forgery (CSRF)

Hello, I Found Cross-Site Request Forgery CSRF while made new Category POC : just put user site and the name of the category on this HTML Form and the category will be created to this account. there is no any token to validate the request here so the attacker can use this to made a CSRF attack to...

0.9AI score
SaveExploits0
Packet Storm
Packet Storm
added 2016/06/03 12:0 a.m.29 views

Notilus 2012 R3 SQL Injection

Exploit Title: Notilus SQL injection Product: Notilus travel solution software Vulnerable Versions: 2012 R3 Tested Version: 2012 R3 Advisory Publication: 03/06/2016 Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' CWE-89 CVE Reference: NONE...

7.4AI score
SaveExploits0
hackapp
hackapp
added 2016/04/01 9:38 a.m.10 views

Expense Manager - Dynamic Code Loading, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:38 a.m.8 views

MoneyControl Expense Tracking - Exported components, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application MoneyControl Expense Tracking published at the 'play' market has multiple vulnerabilities...

1.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:2 a.m.26 views

Expensify - Expense Reports - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Expensify - Expense Reports published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:2 a.m.14 views

Financisto - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financisto - Expense Manager published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:1 a.m.13 views

CWMoney 2.0 Expense Track - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CWMoney 2.0 Expense Track published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:1 a.m.9 views

Expense Manager - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:1 a.m.16 views

Financius - Expense Manager - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Financius - Expense Manager published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:1 a.m.18 views

Expense Manager - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:1 a.m.27 views

Expense Manager - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/03/30 8:0 a.m.12 views

Expense Manager - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Expense Manager published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/02/22 11:28 a.m.15 views

Walnut: Track & Split Expenses - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Walnut: Track & Split Expenses published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2015/10/22 12:0 a.m.10 views

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2015-06955)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle. An unspecified vulnerability exists in Oracle PeopleSoft Products 9.2. It allows an authenticated remote user to affect confidentiality through the associated expense report general unknown vector...

3.5CVSS6.5AI score0.01244EPSS
SaveExploits0References1
NVD
NVD
added 2015/10/21 9:59 p.m.25 views

CVE-2015-4825

Unspecified vulnerability in the PeopleSoft Enterprise FIN Expenses component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Expense Report General...

3.5CVSS5.2AI score0.01244EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/10/21 9:0 p.m.23 views

CVE-2015-4825

Unspecified vulnerability in the PeopleSoft Enterprise FIN Expenses component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Expense Report General...

5.2AI score0.01244EPSS
SaveExploits0References2
Rows per page
Query Builder