tomser-vip.com Cross Site Scripting vulnerability OBB-2317444

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VIP.com Cross-Site Request Forgery Vulnerability

VIP.com application for IOS and Android is an online shopping application based on IOS and Android platforms by China Vipshop Information Technology Company. A security vulnerability exists in the VIP.com application for IOS and Android based platforms. A remote attacker can leverage a rogue acce...

zencondos-vip.com XSS vulnerability

Open Bug Bounty ID: OBB-591097 Description| Value ---|--- Affected Website:| zencondos-vip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

expresscondos-vip.com XSS vulnerability

Open Bug Bounty ID: OBB-588065 Description| Value ---|--- Affected Website:| expresscondos-vip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-13127

The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...

Authentication flaw

The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...

CVE-2017-13127

The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack...

CVE-2017-13127

The CVE-2017-13127 issue affects the VIP.com mobile application (iOS and Android) and is described as allowing remote attackers to obtain sensitive information and hijack user authentication through a rogue Wi‑Fi access point enabling a man‑in‑the‑middle attack. Public records (NVD and CNVD) cons...

pokerdom-vip.com XSS vulnerability

Vulnerable URL:...