251 matches found
CVE-2017-9025
Heap buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header...
Uber: deleting payment profile during active trip puts account into arrears but active trip is temporarily “free”
Deleting a payment profile for an account that is actively taking a trip results in the trip not being charged, but moves the user's account into arrears and when a payment profile is added back, the account is charged the unpaid amount...
SQL Injection Vulnerability in VOA (Pengwei) System name parameter
Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system name parameter exists SQL injection vulnerability, the vulnerability URL is http://demo.kmpsoft.com/MyWorkflow/WFGetTripNo.aspx. Attackers can use the...
Field Trip - ContentProvider mode not defined, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Field Trip published at the 'play' market has multiple vulnerabilities...
Uber: Disclosure of ways to the site root
Hello. Go to this address and you see error with addresses https://trip.uber.com/1% Request GET /1% HTTP/1.1 Host: trip.uber.com Connection: keep-alive Cache-Control: max-age=0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 User-Agent: Mozilla/5.0 Windows NT 6.1;...
Trip to the zoo for kids - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Trip to the zoo for kids published at the 'play' market has multiple vulnerabilities...
Tower Trip - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Tower Trip published at the 'play' market has multiple vulnerabilities...
Date Night Salon: Sunset Trip - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Date Night Salon: Sunset Trip published at the 'play' market has multiple vulnerabilities...
Zombie Road Trip - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Zombie Road Trip published at the 'play' market has multiple vulnerabilities...
Jelly Blast-Candy Trip - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Jelly Blast-Candy Trip published at the 'play' market has multiple vulnerabilities...
Extreme Road Trip 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Extreme Road Trip 2 published at the 'play' market has multiple vulnerabilities...
TripIt: Trip Planner - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application TripIt: Trip Planner published at the 'play' market has multiple vulnerabilities...
Trip-& Travelplaner a2bme-Navi - Base64 encoded String, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Trip-& Travelplaner a2bme-Navi published at the 'play' market has multiple vulnerabilities...
Thousands of Hacked Uber Accounts Selling on Dark Web for $1
$US1 may be a very little amount, but it is enough to buy you a stolen Uber account and free car rides around the city. Two separate vendors on AlphaBay, a relatively new Dark Web marketplace launched in late 2014, are selling active Uber accounts with usernames and passwords for $1 each,...
Unspecified Vulnerability in Oracle Siebel Life Sciences Component
Oracle Siebel is a customer relationship management software. A security vulnerability in the Clinical Trip Report child of the Oracle Siebel Life Sciences component allows remote attackers to exploit the vulnerability to compromise system confidentiality...
CVE-2015-0398
Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report...
CVE-2015-0398
Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report...
Design/Logic Flaw
Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report...
CVE-2015-0398
Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report...
