Malicious Package

Overview sixt is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was installe...

Malicious code in sixt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db59f1b325dca20e6aa112d88e03b0238a9e4b026480cd4c74b766991cbc5ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6136 Malicious code in sixt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db59f1b325dca20e6aa112d88e03b0238a9e4b026480cd4c74b766991cbc5ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Sixt GmbH & Co. Autovermietung KG: Company Employes Sensitive Information exposed in Android App

Summary: Hi team while analyzing the apk in com.sixt.app.kit.one.manager.share.ShareMockResponseFactory class i found one jwt token and this token upon decoding it revealed certain information about a employee profile of an company who is their ANDROID developer Steps To Reproduce: 1. download th...

sixt.com.au XSS vulnerability

Vulnerable URL: https://www.sixt.com.au/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

sixt.se XSS vulnerability

Vulnerable URL: https://www.sixt.se/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

sixt.dk XSS vulnerability

Vulnerable URL: https://www.sixt.dk/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

gr.sixt.com XSS vulnerability

Vulnerable URL: https://gr.sixt.com/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%20informieren!=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

partner.sixt.de XSS vulnerability

Vulnerable URL: http://partner.sixt.de/php/reservation/start?view=";alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Sixt Rent a Car - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Sixt Rent a Car published at the 'play' market has multiple vulnerabilities...

Sixt Leasing - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Sixt Leasing published at the 'play' market has multiple vulnerabilities...