Sushi For You - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sushi For You published at the 'play' market has multiple vulnerabilities...

用友PDM Professional-Jboss配置不当导致代码执行

No description provided by source...

用友某系统任意注册，导致泄露内部项目相关信息

简要描述： 用友某系统任意注册，导致泄露内部项目相关信息 详细说明： http://www.yonyougov.com:8080 这里竟然有个注册功能 ，我注册了一个 用户名aaaaa 密码admin 登录进去里面全是用友开发项目的bug等问题 还能提交问题上传文件 漏洞证明：...

BlinkSale Bug Bounty #2 - Cross Site Scripting Vulnerability

Document Title: =============== BlinkSale Bug Bounty 2 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1448 Release Date: ============= 2015-09-28 Vulnerability Laboratory ID VL-ID: ===================================...

Syria2u You Shop 1.0 Cross Site Request Forgery / Cross Site Scripting

| Title : Syria2u You Shop v1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Dork : سكربت يوشــوب للتسوق عبر الانترنت , قم باختيار المدينة ثم تمتع بالتسوق في مدينتك من أي مكان | Tested on: win8.1 Fr V.Pro 15:39 23/05/2015 | Bug : Mullti | Download :...

CVE-2014-7457

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7313

The One You Fitness aka com.apponeyou.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The One You Fitness aka com.apponeyou.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7457

The CVE-2014-7457 entry concerns the Electronics For You Android app (com.magzter.electronicsforyou) version 3.02, where SSL server certificate verification is not performed. This allows MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. The issue is describe...

CVE-2014-7457

The Electronics For You aka com.magzter.electronicsforyou application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7313

The CVE concerns The One You Fitness Android app (package com.app_oneyou.layout) version 1.399, which does not verify X.509 certificates from SSL servers. Root cause: TLS certificate validation is not performed, enabling man-in-the-middle attackers to impersonate servers and potentially obtain se...

Thank You Counter Button <= 1.8.2 - Cross-Site Scripting (XSS)

The Thank You Counter Button WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

PTC Site's RCE/XSS Vulnerability

No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:intext:Warning: passthru inurl:view=help...

Joomla! You!Hostit! 1.0.1 Template Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37260/info The Joomla! You!Hostit! template is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

eYou v4 /grad/admin/admin_maincontent.php 登录绕过漏洞

No description provided by source...

CVE-2014-2315

Multiple cross-site scripting XSS vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 thankscaption, 2 thankscaptionstyle, or 3 thanksstyle parameter to wp-admin/options.php...

CVE-2014-2315

The CVE-2014-2315 entry concerns the WordPress plugin “Thank You Counter Button” (version 1.8.7) and is impacted by multiple stored XSS flaws. The vulnerability affects the parameters (thanks_caption, thanks_caption_style, thanks_style) passed to wp-admin/options.php, enabling remote attackers to...

WordPress Thanks You Counter Button 1.8.7 Cross Site Scripting

============================================================== Title ...| Thanks You Counter Button XSS Version .| thanks-you-counter-button 1.8.7 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://www.wordpress.org/plugins/...

Facebook vulnerability allows to view hidden Facebook Friend List

Facebook is one of the most powerful and reliable social networking website. It allows users to interact with other users after being friends with one another. Facebook allows users to make the friend list public or private. If it is made private, your friend list won't appear on your publicly...