my190.vodafone.it XSS vulnerability

Open Bug Bounty ID: OBB-596477 Description| Value ---|--- Affected Website:| my190.vodafone.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.vodafone.ie XSS vulnerability

Open Bug Bounty ID: OBB-556694 Description| Value ---|--- Affected Website:| search.vodafone.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fax2mail.vodafone.it XSS vulnerability

Open Bug Bounty ID: OBB-531662 Description| Value ---|--- Affected Website:| fax2mail.vodafone.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosur...

Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features

Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control. Researchers sai...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

My Vodafone (AL) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Vodafone AL published at the 'play' market has multiple vulnerabilities...

vodafone.de XSS vulnerability

Open Bug Bounty ID: OBB-441693 Description| Value ---|--- Affected Website:| vodafone.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

vodafone.de XSS vulnerability

Vulnerable URL: https://www.vodafone.de/ussa/webtt/login.ftel?name=%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2534 VIP website status:| Yes Coordinated Disclosure...

aa.vfc.vodafone.com XSS vulnerability

Open Bug Bounty ID: OBB-417530 Description| Value ---|--- Affected Website:| aa.vfc.vodafone.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

smartshop.vodafone.de XSS vulnerability

Open Bug Bounty ID: OBB-417409 Description| Value ---|--- Affected Website:| smartshop.vodafone.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

vodafone.de XSS vulnerability

Vulnerable URL: https://www.vodafone.de/unternehmen/suche.html?searchCustomerContext=enterprise|domain.allg-info=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Public...

vodafone.de XSS vulnerability

Vulnerable URL: https://www.vodafone.de/privat/suche.html?searchCustomerContext=private|domain.allg-info=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

games.vodafone.in XSS vulnerability

Vulnerable URL: http://games.vodafone.in/store?categoryId=3"=See all Details: Description| Value ---|--- Patched:| Yes, at 30.08.2017 Latest check for patch:| 30.08.2017 07:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

app.vodafone.ua XSS vulnerability

Vulnerable URL: http://app.vodafone.ua/store?categoryId=3"=See all Details: Description| Value ---|--- Patched:| Yes, at 30.08.2017 Latest check for patch:| 30.08.2017 07:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

vodafone.intelliresponse.com XSS vulnerability

Vulnerable URL: https://vodafone.intelliresponse.com/index.jsp Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27329 VIP website status:| Yes Check...

Vodafone Italia Webmail Cross Site Scripting

Title: Vodafone Webmail - Stored Cross-Site Scripting Date: 2017-07-14 Exploit Author: theMiddle / https://github.com/theMiddleBlue Website: https://web.mail.vodafone.it 1. Description the Vodafone Italia webmail web.mail.vodafone.it suffers from a stored cross-site scripting vulnerability. The...

shop.vodafone.in XSS vulnerability

Vulnerable URL: https://shop.vodafone.in/shop/gsaSearchResults.jsp Details: Description| Value ---|--- Patched:| Yes, at 12.07.2017 Latest check for patch:| 12.07.2017 13:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

vodafone.com XSS vulnerability

Vulnerable URL: http://www.vodafone.com/business/press-releases?topics=oursolutions Details: Description| Value ---|--- Patched:| Yes, at 31.10.2017 Latest check for patch:| 31.10.2017 06:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18438 VIP website...

obm.vodafonepartnerservices.co.uk XSS vulnerability

Vulnerable URL: https://obm.vodafonepartnerservices.co.uk/cgi-bin/WebObjects/OBMVPS.woa/wa/resetPassword%22'--!%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C/ Details: Description| Value ---|--- Patched:| Yes, at 14.09.2017 Latest check for patch:| 14.09.2017 12:18 GMT...

iam-stage.vodafone.com XSS vulnerability

Vulnerable URL: https://iam-stage.vodafone.com/logincreds/login.jsp?requestid=296669762%2086596519%22%27--!%3E%3CInput%20Autofocus%20Onfocus=confirmOPENBUGBOUNTY%20%3C!--// Details: Description| Value ---|--- Patched:| Yes, at 01.11.2017 Latest check for patch:| 01.11.2017 06:28 GMT Vulnerability...