EUVD-2014-5425

Malware in sbrugna...

collection.thewestmoreland.org Cross Site Scripting vulnerability OBB-3517178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

apps.co.westmoreland.pa.us XSS vulnerability

Vulnerable URL: http://apps.co.westmoreland.pa.us/prison/PrisonInmates/PRISONINMATES.ASP?unit=%22%3E%3C/script%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Eh Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2014-5538

The Westmoreland Water FCU aka air.com.creditunionhomebanking.mb115 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5538

CVE-2014-5538 affects the Westmoreland Water FCU Android app (1.2.0) and is due to the app not verifying X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. No patch or remediation details are provided in the co...

CVE-2014-5538

The Westmoreland Water FCU aka air.com.creditunionhomebanking.mb115 application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...