stores.purefishing.com XSS vulnerability

Vulnerable URL: http://stores.purefishing.com/map?brandID1=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Slack: Access of Android protected components via embedded intent

@bagipro found a vulnerability wherein a malicious and unprivileged app on the victim's phone could interact with any activity in the Slack Android app, allowing manipulation of the app in unintended ways. Thanks for the finding @bagipro! I found the following code inside com.Slack.ui.HomeActivit...

PortSwigger Web Security: Order-phishing via Payment ID URL

Hello. I discovered the endpoint, which allows the attacker conduct the fishing attack to other users and they can pay for attacker's order. Why this can happen? On the site, order id parameter sends to the https://portswigger.net/CCPayment.aspx as POST, but attacker can append it as GET and it...

fishing-life.ru Open Redirect vulnerability

Vulnerable URL: http://fishing-life.ru/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3758103 VIP website status:| No Check...

Mailbox fishing those things: the Chrome address reverse vulnerability use cases-vulnerability warning-the black bar safety net

First talk about the recently seen one of the more interesting vulnerability, the Google browser chrome address inversion, later we'll said. One day, your mailbox has received an incredible message that may come from your boss or your best friend, do not feel strange, it is likely that you are...

ss.lv XSS vulnerability

Vulnerable URL: https://www.ss.lv/ru/entertainment/hunting-fishing/clothes-for-hunting-and-fishings/frame/?domain=...

grangersfishing.com XSS vulnerability

Vulnerable URL: http://grangersfishing.com/bh.php?dm=homero.com.mx";;alert'OPENBUGBOUNTY';function zif0// Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 13:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Fishing puzzle for toddlers - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fishing puzzle for toddlers published at the 'play' market has multiple vulnerabilities...

Happy Fishing: game for kids - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Happy Fishing: game for kids published at the 'play' market has multiple vulnerabilities...

Fishing Fever - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Fever published at the 'play' market has multiple vulnerabilities...

Fly Fishing 3D - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fly Fishing 3D published at the 'play' market has multiple vulnerabilities...

i Fishing Lite - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application i Fishing Lite published at the 'play' market has multiple vulnerabilities...

Bass Fishing 3D Free - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bass Fishing 3D Free published at the 'play' market has multiple vulnerabilities...

Fishing Fishing: Set The Hook! - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Fishing: Set The Hook! published at the 'play' market has multiple vulnerabilities...

Fishing Mania 3D - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Mania 3D published at the 'play' market has multiple vulnerabilities...

Fishing Hook - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Hook published at the 'play' market has multiple vulnerabilities...

Fishing Paradise 3D Free+ - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Paradise 3D Free+ published at the 'play' market has multiple vulnerabilities...

Fishing Games - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Games published at the 'play' market has multiple vulnerabilities...

Ninja Fishing - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Ninja Fishing published at the 'play' market has multiple vulnerabilities...

Fishing Knots - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fishing Knots published at the 'play' market has multiple vulnerabilities...