csh.rit.edu XSS vulnerability

Open Bug Bounty ID: OBB-278313 Description| Value ---|--- Affected Website:| csh.rit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Girls Who Code Summer Immersion Program - Week One

Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...

SayHi Chat, Love, Meet, Dating - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SayHi Chat, Love, Meet, Dating published at the 'play' market has multiple vulnerabilities...

Couplemaker Dating - Chat Meet - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Couplemaker Dating - Chat Meet published at the 'play' market has multiple vulnerabilities...

IFY - Chat & Meet New People - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application IFY - Chat & Meet New People published at the 'play' market has multiple vulnerabilities...

Blendr - Chat, Flirt & Meet - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Blendr - Chat, Flirt & Meet published at the 'play' market has multiple vulnerabilities...

Moco - Chat, Meet People - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Moco - Chat, Meet People published at the 'play' market has multiple vulnerabilities...

Twoo - Meet new people - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Twoo - Meet new people published at the 'play' market has multiple vulnerabilities...

secure.meetup.com XSS vulnerability

Vulnerable URL: https://secure.meetup.com/register/?title=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;alert%28/XSSPOSED/%29;%27src=1%3E Details: Description| Value ---|--- Patched:| Yes, at 03.04.2016 Latest check for patch:| 03.04.2016 01:30 GMT Vulnerability type:| XSS...

Oracle: Security Advisory (ELSA-2012-0069)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5732

The CVE-2014-5732 issue affects the Android app known as Wamba (com.wamba.client) version 3, where X.509 certificate validation is not performed by SSL servers. This missing certificate validation constitutes a trust flaw in the app’s TLS handling and can allow man-in-the-middle attackers to spoo...

CVE-2014-5579

The Anywhere Pad-Meet, Collaborate aka com.azeus.anywherepad application 4.0.1031 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5579

The CVE-2014-5579 entry concerns the Anywhere Pad-Meet, Collaborate app (com.azeus.anywherepad) on Android, version 4.0.1031. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and retrieve sensitive da...

IBM Sametime Meet Server 8.5 Password Disclosure

Exploit Title: IBM Sametime Meet Server 8.5 Password Disclosure Google Dork: intitle:"Meeting Center - IBM Lotus Sametime" Date: 11/08/2014 CVSS Score: http://nvd.nist.gov/cvss.cfm?calculator&version=2&vector=AV:L/AC:L/Au:N/C:P/I:N/A:N CVE-ID:...

IBM Sametime Meet Server 8.5 Cross Site Scripting

Exploit Title: IBM Sametime Meet Server 8.5 Reflect Cross Site Script Google Dork: intitle:"Meeting Center - IBM Lotus Sametime" Date: 11/08/2014 CVSS Score: http://nvd.nist.gov/cvss.cfm?calculator&version=2&vector=AV:N/AC:M/Au:N/C:P/I:N/A:N%29 CVE-ID:...

Meet#Web 0.8 ManagerRightsResource.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

Meet#Web 0.8 RegForm.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

Meet#Web 0.8 ManagerResource.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

Meet#Web 0.8 RegRightsResource.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

Meet#Web 0.8 RegResource.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...