EUVD-2017-14988

Malware in sbrugna...

content.tradeking.com XSS vulnerability

Open Bug Bounty ID: OBB-633502 Description| Value ---|--- Affected Website:| content.tradeking.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

TradeKing Forex for iPhone app for iOS Information Disclosure Vulnerability

TradeKing Forex for iPhone app for iOS is a highly customizable forex trading platform for iOS from TradeKing. A security vulnerability exists in version 1.2.1 of the TradeKing Forex for iPhone app for iOS, which is caused by the program failing to validate an X.509 certificate on the SSL server...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5913

The CVE-2017-5913 vulnerability affects the TradeKing Forex for iPhone app (iOS) version 1.2.1, where the app does not verify X.509 certificates from SSL servers. The root cause is improper SSL certificate validation, enabling MITM attackers to spoof servers and potentially exfiltrate sensitive i...

CVE-2017-5913

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-16753

Name of the Vulnerable Software and Affected Versions TradeKing Forex for iPhone app version 1.2.1 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2017-5913: Improper Certificate Validation

The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

content.tradeking.com XSS vulnerability

Vulnerable URL: http://content.tradeking.com/wiki/pages/listpages-alphaview.action?key="'--!KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...