PT-2026-36924

ITEMS ADDED: Filters Add filter for Atmos PM-5173 Filters Add filter for audio layout PM-5118 Filters Add filters for video, audio, and subtitle codecs PM-5117 Metadata Add support for RottenTomatoes audience and average ratings to Nfo parser PM-5176 Metadata Detect Dolby Atmos PM-4004 Metadata...

rottentomatoes.com XSS vulnerability

Vulnerable URL: https://www.rottentomatoes.com/browse/dvd-all/?amazon==%3C/SCript%3E%3CsvG/onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2014-5905

The Grocery List - Tomatoes (aka com.meucarrinho) Android app 5.1.4 does not verify SSL certificates, allowing MITM attackers to spoof servers and access sensitive data via crafted certificates. Root cause: failure to validate X.509 server certificates during TLS connections. Impact: disclosure o...

CVE-2014-5905: Undefined Security Weakness

The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6890

Name of the Vulnerable Software and Affected Versions The Grocery List - Tomatoes aka com.meucarrinho version 5.1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...