XML Entity Injection Vulnerability in Scrap Recycling Alliance App

Scrap Recycling Union APP is a mobile software that focuses on the functions related to scrap recycling. The Scrap Recycling Alliance APP suffers from an XML entity injection vulnerability. An attacker can exploit the vulnerability by constructing malicious entities that result in the execution o...

scrap-casket.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1173399 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

scrap-n-crop.com Cross Site Scripting vulnerability OBB-1083754

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Trucktown: Scrap Yard Scramble - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Trucktown: Scrap Yard Scramble published at the 'play' market has multiple vulnerabilities...

Rayzz Photoz Upload Vulnerability

No description provided by source. ========================================================== Rayzz Photoz Upload Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...