godmode-trader.de XSS vulnerability

Open Bug Bounty ID: OBB-706613 Description| Value ---|--- Affected Website:| godmode-trader.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

as.godmode-trader.de Open Redirect vulnerability

Open Bug Bounty ID: OBB-706388 Description| Value ---|--- Affected Website:| as.godmode-trader.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

Cross site scripting

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

CVE-2018-10097 describes a cross-site scripting vulnerability in Domain Trader version 2.5.3, exploitable via the recoverlogin.php email_address parameter. The issue is a client-side/script injection flaw in that input parameter, enabling arbitrary script/HTML to be injected when processed by the...

Smartscript Solutions Domain Trader Cross-Site Scripting Vulnerability

Smartscript Solutions Domain Trader is a suite of domain name auction and domain parking software from Smartscript Solutions in the UK. A cross-site scripting vulnerability exists in Smartscript Solutions Domain Trader version 2.5.3. The vulnerability can be exploited by remote attackers to injec...

TradeKing FOREXTrader for iPhone app for iOS Sensitive Rest Vulnerability

TradeKingFOREXTraderforiPhoneappforiOS is the United States of America Karson TradeKing company for iOS a highly personalized operating environment with the foreign exchange trading platform. A sensitive information disclosure vulnerability exists in versions 2.9.12 to 2.9.14 of...

CVE-2017-5912

The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

My Link Trader 1.1 - id SQL Injection

My Link Trader 1.1 - id SQL Injection Vulnerability: My link trader - SQL Injection Date: 11.01.2017 Vendor Homepage: http://software.friendsinwar.com/scriptsexample/mylinktrader/ Tested on: Kali Linux 2016.2 Author: Dawid Morawski Website: http://www.morawskiweb.pl Contact:...

My Link Trader 1.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Type: login bypass via SQLi Vendor: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: 1.1 Software Link: http://software.friendsinwar.com/downloads.php?catid=2&downloadid=13 Author: Netsalar Mail :...

My Link Trader 1.1 SQL Injection

Vulnerability:: Admin Login Bypass & SQLi Date:09.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: v1.1 Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=13 Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

commercialtrucktrader.com XSS vulnerability

Open Bug Bounty ID: OBB-203921 Description| Value ---|--- Affected Website:| commercialtrucktrader.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

NFL HUDDLE: NFL Card Trader - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NFL HUDDLE: NFL Card Trader published at the 'play' market has multiple vulnerabilities...

KICK: Football Card Trader - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application KICK: Football Card Trader published at the 'play' market has multiple vulnerabilities...

UFX Trader - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application UFX Trader published at the 'play' market has multiple vulnerabilities...

Trader Trainer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Trader Trainer published at the 'play' market has multiple vulnerabilities...

eToro - Mobile Trader - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application eToro - Mobile Trader published at the 'play' market has multiple vulnerabilities...

CVE-2014-5997

The Auto Trader aka za.co.autotrader.android.app application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...