sslnuke

sslnuke -- SSL senza verifica non è sicuro! Abbiamo sentito tutti ripetutamente che SSL senza verifica non è sicuro. Se una connessione SSL non viene verificata con un certificato memorizzato nella cache, può essere facilmente dirottata da qualsiasi aggressore. Quindi nel 2013, si penserebbe che...

lwebs.co.uk Open Redirect vulnerability

Vulnerable URL: http://lwebs.co.uk/go/news/53526/?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 10307133 Google Pagerank| 0 VIP website...

sweetlocation.co.uk XSS vulnerability

Vulnerable URL: http://sweetlocation.co.uk/for-sale/404%22%3E%3Cimg+src%3dx+onerror%3dwindow.onerror%3dalert%3bthrow%2fxssposed%2f%3b%2f%2f%3E%3C/mode/sale/category/1 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:35 GMT Vulnerability type:...

intemz.su XSS vulnerability

Vulnerable URL: http://intemz.su/search.phtml?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2014-7758

The CVE-2014-7758 entry corresponds to the AMKAMAL Science Portfolio Android app (package com.wAMKAMALSciencePortfolio) version 0.1, where the vulnerability is an inability to verify X.509 certificates from SSL servers. The root cause is missing TLS/SSL certificate validation, which can allow man...

Information disclosure

The Gulf Coast Educators FCU aka com.metova.cuae.gcefcu application 1.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...