you-mp3.net XSS vulnerability

Vulnerable URL: https://www.you-mp3.net/ara?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 404846 VIP website status:| No Check you-mp3.net SSL connection:| Grade: B- Coordinat...

用友ERP-NC任意文件遍历漏洞

No description provided by source...

Would You Rather (Best) - GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Would You Rather Best published at the 'play' market has multiple vulnerabilities...

Can You Escape - Tower - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Can You Escape - Tower published at the 'play' market has multiple vulnerabilities...

You Must Escape - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application You Must Escape published at the 'play' market has multiple vulnerabilities...

Can You Escape 4 - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Can You Escape 4 published at the 'play' market has multiple vulnerabilities...

You Can Cook - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application You Can Cook published at the 'play' market has multiple vulnerabilities...

Happy Birthday To You - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Happy Birthday To You published at the 'play' market has multiple vulnerabilities...

YOU&IDOL powered by About You - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application YOU&IDOL powered by About You published at the 'play' market has multiple vulnerabilities...

YOU FM - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application YOU FM published at the 'play' market has multiple vulnerabilities...

Sushi For You - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sushi For You published at the 'play' market has multiple vulnerabilities...

用友PDM Professional-Jboss配置不当导致代码执行

No description provided by source...

用友某系统任意注册，导致泄露内部项目相关信息

简要描述： 用友某系统任意注册，导致泄露内部项目相关信息 详细说明： http://www.yonyougov.com:8080 这里竟然有个注册功能 ，我注册了一个 用户名aaaaa 密码admin 登录进去里面全是用友开发项目的bug等问题 还能提交问题上传文件 漏洞证明：...

BlinkSale Bug Bounty #2 - Cross Site Scripting Vulnerability

Document Title: =============== BlinkSale Bug Bounty 2 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1448 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ===================================...

Syria2u You Shop 1.0 Cross Site Request Forgery / Cross Site Scripting

| Title : Syria2u You Shop v1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Dork : سكربت يوشــوب للتسوق عبر الانترنت , قم باختيار المدينة ثم تمتع بالتسوق في مدينتك من أي مكان | Tested on: win8.1 Fr V.Pro 15:39 23/05/2015 | Bug : Mullti | Download :...

CVE-2014-7457

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7313

The One You Fitness aka com.apponeyou.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The One You Fitness aka com.apponeyou.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7457

The CVE-2014-7457 entry concerns the Electronics For You Android app (com.magzter.electronicsforyou) version 3.02, where SSL server certificate verification is not performed. This allows MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The issue is describe...