CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The CVE-2017-5913 vulnerability affects the TradeKing Forex for iPhone app (iOS) version 1.2.1, where the app does not verify X.509 certificates from SSL servers. The root cause is improper SSL certificate validation, enabling MITM attackers to spoof servers and potentially exfiltrate sensitive i...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

my.alfa-forex.ru XSS vulnerability

Vulnerable URL: https://my.alfa-forex.ru/storage/banners/rux18x120x240.swf?clickTag=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

Stocks, Forex, Futures & News - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stocks, Forex, Futures & News published at the 'play' market has multiple vulnerabilities...

Форекс Опционы - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Форекс Опционы published at the 'play' market has multiple vulnerabilities...

Бинарный Форекс - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Бинарный Форекс published at the 'play' market has multiple vulnerabilities...

Forex Calendar, Market & News - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Forex Calendar, Market & News published at the 'play' market has multiple vulnerabilities...

NetDania Forex & Stocks - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NetDania Forex & Stocks published at the 'play' market has multiple vulnerabilities...

Forex Tools - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Forex Tools published at the 'play' market has multiple vulnerabilities...

Trading 212 Forex & Stocks - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Trading 212 Forex & Stocks published at the 'play' market has multiple vulnerabilities...

CVE-2014-5578

The Trading 212 FOREX aka com.avuscapital.trading212 application before 2.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Trading 212 FOREX aka com.avuscapital.trading212 application before 2.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5578

The Trading 212 FOREX aka com.avuscapital.trading212 application before 2.0.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5578

The CVE-2014-5578 entry describes the Trading 212 FOREX Android app prior to version 2.0.9 failing to verify X.509 certificates from SSL servers. Root cause: improper SSL/TLS certificate validation, enabling MITM attackers to spoof servers and extract sensitive information through a crafted certi...

Equis MetaStock <= 11 Use After Free

No description provided by source. Luigi Auriemma Application: Equis MetaStock http://www.equis.com Versions: = 11 Platforms: Windows Bug: use after free Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

Equis MetaStock 11 - Use-After-Free

Luigi Auriemma Application: Equis MetaStock http://www.equis.com Versions: = 11 Platforms: Windows Bug: use after free Exploitation: file Date: 06 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1 Introduction...

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection SQL Injection Vulnerability found in Dukascopy by zSecure Team. Dukascopy offers direct access to the Swiss Foreign Exchange Marketplace. This market provides the largest pool of ECN spot forex liquidity available for banks, hedge funds, oth...

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection SQL Injection Vulnerability found in Dukascopy by zSecure Team. Dukascopy offers direct access to the Swiss Foreign Exchange Marketplace. This market provides the largest pool of ECN spot forex liquidity available for banks, hedge funds, oth...