EUVD-2014-7001

Malware in sbrugna...

profile.lansingstatejournal.com Cross Site Scripting vulnerability OBB-1259430

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

classifieds.lansingstatejournal.com XSS vulnerability

Vulnerable URL: http://classifieds.lansingstatejournal.com/category.php?ft=OPENBUGBOUNTY%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

login.lansingstatejournal.com XSS vulnerability

Vulnerable URL: https://login.lansingstatejournal.com/PLSJ-GUP/authenticate/?cancel-url= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2014-7122

The Lansing State Journal Print aka com.lansingjournal.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Lansing State Journal Print aka com.lansingjournal.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7122

CVE-2014-7122 affects the Lansing State Journal Print Android app (package: com.lansingjournal.android.prod, version 6.7). The flaw is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via crafted cert...

CVE-2014-7122

The Lansing State Journal Print aka com.lansingjournal.android.prod application 6.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...