14 matches found
homeadvisor.com XSS vulnerability
Open Bug Bounty ID: OBB-701343 Description| Value ---|--- Affected Website:| homeadvisor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HomeAdvisor Pro - EntityHash Auth Bypass Vulnerability
Document Title: =============== HomeAdvisor Pro - EntityHash Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1557 Video: https://www.vulnerability-lab.com/getcontent.php?id=1929 Release Date: ============= 2018-07-19 Vulnerabili...
HomeAdvisor Pro - (EntityHash) Auth Bypass Vulnerability
Document Title: =============== HomeAdvisor Pro - EntityHash Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/customer/getcontent.php?id=1929 Video: https://www.youtube.com/watch?v=PQsCIOyESIo Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1557...
HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability
Document Title: =============== HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID: ====================================...
HomeAdvisor Pro - (EntityHash) Auth Bypass Vulnerability
Document Title: =============== HomeAdvisor Pro - EntityHash Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/customer/getcontent.php?id=1929 Video: https://www.youtube.com/watch?v=PQsCIOyESIo Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1557...
HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability
Document Title: =============== HomeAdvisor - Filter Bypass & CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID: ====================================...
homeadvisor.com XSS vulnerability
Open Bug Bounty ID: OBB-450163 Description| Value ---|--- Affected Website:| homeadvisor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
homeadvisor.com XSS vulnerability
Open Bug Bounty ID: OBB-358063 Description| Value ---|--- Affected Website:| homeadvisor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
homeadvisor.com XSS vulnerability
Open Bug Bounty ID: OBB-318487 Description| Value ---|--- Affected Website:| homeadvisor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HomeAdvisor Filter Bypass / Script Insertion
Document Title: =============== HomeAdvisor Bug Bounty 1 - Filter Bypass & Client Side Exception Handling Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1452 Release Date: ============= 2015-04-21 Vulnerability Laboratory ID VL-ID:...
CVE-2014-6866
The HomeAdvisor Mobile aka com.servicemagic.consumer application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The HomeAdvisor Mobile aka com.servicemagic.consumer application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6866
The CVE-2014-6866 entry concerns HomeAdvisor Mobile (com.servicemagic.consumer) app v3.0.3 on Android. The issue is the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. The NV...
CVE-2014-6866
The HomeAdvisor Mobile aka com.servicemagic.consumer application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...