320 matches found
wordsworldwide.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-690900 Description| Value ---|--- Affected Website:| wordsworldwide.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
zuerioberland-tourismus.ch XSS vulnerability
Open Bug Bounty ID: OBB-603483 Description| Value ---|--- Affected Website:| zuerioberland-tourismus.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ALPINE-CVE-2018-7537
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...
UBUNTU-CVE-2018-7537
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...
Cross-site Scripting (XSS)
Concrete5 is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script because the library does not sanitize it's parameters before rendering them for display. The following fields are affected: bannedword in...
Words - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Words published at the 'play' market has multiple vulnerabilities...
dance.nyc XSS vulnerability
Vulnerable URL: https://www.dance.nyc/search/?dir=%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 759468 VIP...
ALPINE-CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has...
The Magic Words - Polite Baby - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application The Magic Words - Polite Baby published at the 'play' market has multiple vulnerabilities...
Baby First Words: 12+ Months - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Baby First Words: 12+ Months published at the 'play' market has multiple vulnerabilities...
Learn Chinese Mandarin Words - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Learn Chinese Mandarin Words published at the 'play' market has multiple vulnerabilities...
3 Bowling with Words Free - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 3 Bowling with Words Free published at the 'play' market has multiple vulnerabilities...
ABC Preschool Sight Words - External URLs vulnerabilities
HackApp vulnerability scanner discovered that application ABC Preschool Sight Words published at the 'play' market has multiple vulnerabilities...
Make Words - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Make Words published at the 'play' market has multiple vulnerabilities...
Words 2048 - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Words 2048 published at the 'play' market has multiple vulnerabilities...
Hidden Words Free - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hidden Words Free published at the 'play' market has multiple vulnerabilities...
Find Words Real - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Find Words Real published at the 'play' market has multiple vulnerabilities...
New PLL Guess Words - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application New PLL Guess Words published at the 'play' market has multiple vulnerabilities...
Words On Tour - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Words On Tour published at the 'play' market has multiple vulnerabilities...