93 matches found
yachtworld.com XSS vulnerability
Vulnerable URL: https://www.yachtworld.com/boat-loans/index.jsp?sm=alert'OPENBUGBOUNTY';...
Кредиты и микро-займы онлайн - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Кредиты и микро-займы онлайн published at the 'play' market has multiple vulnerabilities...
myiris.com XSS vulnerability
Vulnerable URL: http://www.myiris.com/loans/auto/carBank.php?carname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 180639 Google...
CVE-2014-6765
The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6765
The CVE-2014-6765 entry concerns the Android app No Fuss Home Loans (com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7) version 1.0035.b0035, which does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted cert...
CVE-2014-6765
The No Fuss Home Loans aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7 application 1.0035.b0035 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PMB Services <= 3.4.3 SQL Injection Vunerability
Exploit for php platform in category web applications ---------------------------------------------------------------------------- Exploit Title: PMB Services = 3.4.3 Remote SQL Injection Author : Luchador Date : 29-01-2011 Location : Algeria Site : http://vbspiders.com Critical Lvl : Dangerous...
Beware Of Phishing Scams, Vishing, And Other Smishing !
Better Business Bureau has published a list of top 10 scam that seems not only to the biggest scam in 2010, but what to watch in 2011. In no particular order, here they are: Door to door scams Each of the new season of the show to attract new scammer port provides an incredible offer: Roofing in...
PMB Services 3.0.13 - Multiple Remote File Inclusions
PMB Services 3.0.13 - Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File...
PMB Services 3.0.13 - Multiple Remote File Inclusions
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability...
CVE-2002-1020
The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available...
CVE-2002-1020
The CVE-2002-1020 entry concerns Adobe Content Server 3.0. The vulnerability arises in the library feature used for the Add to bookbag operation: when the server reports that no more copies are available, a remote attacker can still check out an eBook. This implies an underlying logic flaw where ...