JVN#89126639: Nike App fails to restrict custom URL schemes properly

Nike App by Nike, Inc. provides the function to access a requested URL using Custom URL Scheme. The app does not restrict access to the function properly CWE-939 which may be exploited to direct the app to access any sites. Impact A remote attacker may lead a user to access an arbitrary website v...

nike-huarache.co.nl XSS vulnerability

Open Bug Bounty ID: OBB-627917 Description| Value ---|--- Affected Website:| nike-huarache.co.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vendorportal.nike.com XSS vulnerability

Open Bug Bounty ID: OBB-612237 Description| Value ---|--- Affected Website:| vendorportal.nike.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

store.inter.it XSS vulnerability

Vulnerable URL: http://store.inter.it/en/catalogsearch/result/?q=nike shoes...

nike.com XSS vulnerability

Vulnerable URL: https://www.nike.com/en/launch/?nr=%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirmOPENBUGBOUNTY%20//%3E Details: Description| Value ---|--- Patched:| Yes, at 18.12.2017 Latest check for patch:| 18.12.2017 07:58 GMT Vulnerability type:| XSS...

nike.com XSS vulnerability

Vulnerable URL: https://www.nike.com/at/launch/?nr=...

finishline.com XSS vulnerability

Vulnerable URL: http://www.finishline.com/nike-air-max?icid="-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| Yes, at 19.07.2017 Latest check for patch:| 19.07.2017 23:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4068 VIP website...

nike.com.hk XSS vulnerability

Vulnerable URL: http://www.nike.com.hk/product/search/transfers.htm?keyword=1%22;onload=alert%28%27X-S-S%27%29;var%20s=%22 Details: Description| Value ---|--- Patched:| Yes, at 13.11.2017 Latest check for patch:| 13.11.2017 11:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

nike-shoes.net XSS vulnerability

Vulnerable URL: http://www.nike-shoes.net/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

NIKE+ TRAINING CLUB - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NIKE+ TRAINING CLUB published at the 'play' market has multiple vulnerabilities...

Nike+ Running - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Nike+ Running published at the 'play' market has multiple vulnerabilities...

Nike Soccer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nike Soccer published at the 'play' market has multiple vulnerabilities...

KicksOnFire Air Jordans & Nike - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application KicksOnFire Air Jordans & Nike published at the 'play' market has multiple vulnerabilities...

roadrunnersports.com XSS vulnerability

Vulnerable URL: http://www.roadrunnersports.com/rrs/products/05213/womens"-nike-air-zoom-vomero-11/?vsg=2 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

store.nike.com XSS vulnerability

Vulnerable URL: http://store.nike.com/us/enus/pd/nike-gift-cards/pid-1549679/pgid-688546'-confirm'XSSPOSED'-' Details: Description| Value ---|--- Patched:| Yes, at 19.09.2015 Latest check for patch:| 19.09.2015 05:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

store.nike.com XSS vulnerability

Vulnerable URL: http://store.nike.com/us/enus/pd/v0raz'-%5Cu0061lert'XSSPOSED'-'/pid-463712/pgid-943980 Details: Description| Value ---|--- Patched:| Yes, at 09.07.2015 Latest check for patch:| 09.07.2015 05:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Nike+ Panel & Mobile App - Multiple Web Vulnerabilities

Title: ====== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=663 VL-ID: ===== 663 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= Da...

Nike+ Panel / Mobile App Cross Site Scripting

Title: ====== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=663 VL-ID: ===== 663 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= Da...

Nike+ Panel / Mobile App Cross Site Scripting

Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...

Nike+ Panel & Mobile App - Multiple Web Vulnerabilities

Document Title: =============== Nike+ Panel & Mobile App - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=663 Release Date: ============= 2012-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 663...