Command Execution Vulnerability in Coupon Pusher CMS

Push Couponer CMS is a completely free Taobao coupon website source code program. A command execution vulnerability exists in Push Couponer CMS, which can be exploited by attackers to execute malicious code...

Coupon Pusher CMS suffers from XSS vulnerability (CNVD-2020-26263)

Push Couponer CMS is a PHP Taobao coupon website system developed by PHP+MySQL. Push Coupon CMS has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

Coupon Pusher CMS suffers from XSS vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...

Coupon Pusher CMS suffers from arbitrary file download vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has an arbitrary file download vulnerability that can be exploited by attackers to cause directory and fi...

Chameleon Coin Pusher - Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chameleon Coin Pusher - Free published at the 'play' market has multiple vulnerabilities...

Coin Stars: Slots Pusher! - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Stars: Slots Pusher! published at the 'play' market has multiple vulnerabilities...

Pharaoh's Party: Coin Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pharaoh's Party: Coin Pusher published at the 'play' market has multiple vulnerabilities...

Coin Party: Carnival Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Party: Carnival Pusher published at the 'play' market has multiple vulnerabilities...

Coinbase: Transactions visible on Unconfirmed devices

Pusher authentication did not take device confirmation into account. This would allow an attacker with a valid session but an unconfirmed device to snoop on pusher updates like incoming transactions. This issue was in the coinbase event notification Pusher, which allowed me to read notification o...

CVE-2012-5813

The CVE-2012-5813 entry concerns the Android_Pusher library for Android where TLS hostname verification is not performed against the server certificate’s CN/subjectAltName. This omission enables man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. The available s...