EXNESS: Improper Implementation of SDK Allows Universal XSS in Webview Leading to Account Takeover

Affected App: Social Trading com.exness.investments App Version: - 2.45.8-release latest on PlayStore Summary: The SurveyMonkey SDK, used to collect surveys from users for analytic and informative purposes, was implemented in an insecure manner in . Particularly, the SMFeedbackActivity was...

smaudience.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-695954 Description| Value ---|--- Affected Website:| smaudience.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

tr.surveymonkey.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-687297 Description| Value ---|--- Affected Website:| tr.surveymonkey.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ko.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687273 Description| Value ---|--- Affected Website:| ko.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jp.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687272 Description| Value ---|--- Affected Website:| jp.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sv.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687271 Description| Value ---|--- Affected Website:| sv.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

da.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687270 Description| Value ---|--- Affected Website:| da.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

it.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687269 Description| Value ---|--- Affected Website:| it.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

es.surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687265 Description| Value ---|--- Affected Website:| es.surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-687264 Description| Value ---|--- Affected Website:| surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

surveymonkey.ru XSS vulnerability

Open Bug Bounty ID: OBB-687263 Description| Value ---|--- Affected Website:| surveymonkey.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

surveymonkey.com XSS vulnerability

Open Bug Bounty ID: OBB-642888 Description| Value ---|--- Affected Website:| surveymonkey.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Releases Advance Notification for February Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its February release will contain 12 bulletins. Three of these bulletins will have the severity rating of critical and will be for Microsoft Windows and Internet Explorer. The remaining bulletins will have a severity...