CVE-2016-6550

The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-6550

The CVE references a vulnerability in the U by BB&T iOS app (versions 1.5.4 and earlier). The root cause is improper validation of SSL server certificates (X.509), enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Affected software: ...

u-cergy.fr XSS vulnerability

Vulnerable URL: https://www.u-cergy.fr/fr/rechercher-dans-le-site.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98921 VIP website status:| No Check u-cergy.fr SSL connection:| Grade: B Coordinated Disclosu...

U by BB&T iOS banking application fails to properly validate SSL certificates

Overview U by BB&T for iOS, version 1.5.4 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle MITM attacks. Description CWE-295: Improper Certificate Validation - CVE-2016-6550U by BB&T is a banking...

The vulnerability of the Serv-U File Server allows a remote attacker to obtain information about the system’s configuration and user authentication credentials.

The vulnerability of the Serv-U File Server software relates to errors that occur during the processing of application variables. Exploiting this vulnerability allows a malicious attacker to obtain system configuration information, including user authentication data...

The vulnerability of the Serv-U File Server allows a remote attacker to obtain the source code of arbitrary scripts.

The vulnerability of the Serv-U File Server software lies in the lack of consideration for accessing files using extended syntax in the NTFS file system. Exploiting this vulnerability by comparing the requested resource’s URL with locations specified in the web server configuration allows a...

The vulnerability of the Serv-U File Server allows a remote attacker to modify the system configuration.

The vulnerability of the Serv-U File Server software lies in errors in the code of the web interface forms. Exploiting this vulnerability allows a malicious attacker to modify system configurations...

The vulnerability of the Serv-U File Server allows a remote attacker to perform a denial-of-service attack.

The vulnerability of the Serv-U File Server software relates to an error that occurs when processing an HTTP request involving a recursive declared variable. Exploiting this vulnerability allows a malicious attacker to perform denial-of-service attacks on the application...

CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

n-e-r-v-o-u-s.com XSS vulnerability

Vulnerable URL: http://n-e-r-v-o-u-s.com/shop/product.php?code=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Design/Logic Flaw

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

Serv-U FTP Server 7.3 Remote Directory Traversal Vulnerability

No description provided by source...

appeditor.u-share.com.tw XSS vulnerability

Vulnerable URL:...

beat gather U - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application beat gather U published at the 'play' market has multiple vulnerabilities...

Hollywood U: Rising Stars - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hollywood U: Rising Stars published at the 'play' market has multiple vulnerabilities...

O2Jam U - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application O2Jam U published at the 'play' market has multiple vulnerabilities...

U Turn - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application U Turn published at the 'play' market has multiple vulnerabilities...

Berlin U-Bahn - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Berlin U-Bahn published at the 'play' market has multiple vulnerabilities...

U-Bahn Wien - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application U-Bahn Wien published at the 'play' market has multiple vulnerabilities...

u-sell.co.nz XSS vulnerability

Vulnerable URL: http://www.u-sell.co.nz/main/browse/search.php?BranchID=%27%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 02.10.2016 Latest check for patch:| 02.10.2016 10:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...