ABC Planet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC Planet published at the 'play' market has multiple vulnerabilities...

Planet Center Parcs - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Planet Center Parcs published at the 'play' market has multiple vulnerabilities...

planet radio - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application planet radio published at the 'play' market has multiple vulnerabilities...

Planet Clementoni - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Planet Clementoni published at the 'play' market has multiple vulnerabilities...

PLANET IP ICA-5350V LFI / XSS / CSRF / Bypass

Overview ======= Technical Risk: high Likelihood of Exploitation: medium Tested version: ICA-5350V/ICA- Credits: Discovered and researched by GT.Omaz from OrwellLabs Issues ===== I. Local File Inclusion II. Arbitrary file read/Authentication bypass III. Sensitive information disclosure IV...

planet-series.tv XSS vulnerability

Open Bug Bounty ID: OBB-97620 Description| Value ---|--- Affected Website:| planet-series.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-2026 Reflected Cross-Site Scripting (XSS) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2026 =================== "Reflected Cross-Site Scripting XSS" CWE-79 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated cross-platform developmen...

CVE-2014-2025 Remote Code Execution (RCE) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2025 =================== "Remote Code Execution RCE via Unrestricted File Upload" CWE-434 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated...

CVE-2014-2026

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2014-2026

The CVE-2014-2026 entry concerns United Planet Intrexx Professional (5.2 prior to Online Update 0905; 6.x prior to Online Update 10). The vulnerability is a reflected Cross-Site Scripting (XSS) in the search functionality, allowing an attacker to inject arbitrary script/HTML via the request param...

PT-2014-4438

Name of the Vulnerable Software and Affected Versions United Planet Intrexx Professional versions prior to 5.2 Online Update 0905 United Planet Intrexx Professional versions 6.x prior to 6.0 Online Update 10 Description A cross-site scripting XSS issue exists in the search functionality, allowing...

CVE-2014-2026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7463

The CVE-2014-7463 entry concerns the IM5 Fans Planet (Android) app version 2.3.1, which fails to verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry reports a CVSSv2...

PT-2014-8017

Name of the Vulnerable Software and Affected Versions IM5 Fans Planet aka uk.co.pixelkicks.im5 version 2.3.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

CVE-2014-7463: Undefined Security Weakness

The IM5 Fans Planet aka uk.co.pixelkicks.im5 application 2.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Harmonizers Planet aka uk.co.pixelkicks.fifthharmony application 2.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...