Adventure Town - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Adventure Town published at the 'play' market has multiple vulnerabilities...

Farm Town: Cartoon Story - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Farm Town: Cartoon Story published at the 'play' market has multiple vulnerabilities...

Medieval Craft: Town Building - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Medieval Craft: Town Building published at the 'play' market has multiple vulnerabilities...

manhattantowncenter.com Open Redirect vulnerability

Vulnerable URL: http://www.manhattantowncenter.com/go/forward.cfm?CameFrom=1=942=2137042137=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

radstock-tc.gov.uk XSS vulnerability

Vulnerable URL: http://www.radstock-tc.gov.uk/radstock-news/press-releases/105-press-release-jan-2014? Details: Description| Value ---|--- Patched:| Yes, at 25.04.2016 Latest check for patch:| 25.04.2016 17:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2014-7670

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7670

The CVE pertains to The Motor Town: Machine Soul Free Android app (com.alawar.motortownfree) version 1.1. It does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information with crafted certificates. Impact is described as partial con...

CVE-2014-7670

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7670: Undefined Security Weakness

The Motor Town: Machine Soul Free aka com.alawar.motortownfree application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-6000

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

Directory traversal

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

CVE-2013-6000

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

CVE-2013-6000

CVE-2013-6000 affects Tattyan HP TOWN (modified version) 5_10 and earlier with a directory traversal vulnerability that allows remote attackers to read arbitrary files by using ".." in a request. The vulnerability is confirmed in multiple external records (JVNDB-2013-000112, JVN41703192, NVD entr...

CVE-2013-6000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Tattyan HP TOWN before 5101 allows remote attackers to read arbitrary files via a .. dot dot in a request...

TOWN (modified version) vulnerable to directory traversal

Overview TOWN modified version provided by Tattyan's HP contains a directory traversal vulnerability. Misukuro reported this vulnerability to the developer. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote attacker may obtain arbitrary...

JVN#41703192: TOWN (modified version) vulnerable to directory traversal

TOWN modified version provided by Tattyan's HP contains a directory traversal vulnerability. Impact A remote attacker may obtain arbitrary files on the server. Solution Apply an update Update to the latest version according to the information provided by the developer. Products Affected TOWN...

CVE-2013-4716

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

Cross site scripting

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-4716

CVE-2013-4716 affects Tattyan HP TOWN 5_9_3 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the query string, potentially leading to arbitrary script execution in the victim’s browser. Affected product is ...