1498 matches found
CVE-2014-7493
CVE-2014-7493 applies to The 100 Books (com.ireadercity.c20) Android app v3.0.2, where SSL certificate validation is not performed for X.509 certificates. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing SSL c...
PT-2014-8040
Name of the Vulnerable Software and Affected Versions The 100 Books aka com.ireadercity.c20 application version 3.0.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...
CVE-2014-7493: Undefined Security Weakness
The 100 Books aka com.ireadercity.c20 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Fedora 19 : kernel-3.14.22-100.fc19 (2014-13020)
The 3.14.22 stable update contains a number of important fixes across the tree. The 3.14.21 stable update contains a number of important fixes across the tree. The 3.14.20 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the...
[SECURITY] Fedora 19 Update: kernel-3.14.22-100.fc19
The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...
CVE-2014-7393: Undefined Security Weakness
The 100 Beauty Tips aka com.ww100BeautyTipsApp application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
openSUSE Security Update : xen (openSUSE-SU-2014:1281-1)
XEN was updated to fix security issues and bugs. Security issues fixed : - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 - CVE-2014-7155:...
Fedora 19 : kernel-3.14.19-100.fc19 (2014-11008)
The 3.14.19 stable update contains a number of important fixes across the tree. The 3.14.18 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
High-Volume, High-Rate DDoS Attacks Persist
As expected, the numbers back up the continued proliferation of both high-volume and high-rate distributed denial of service attacks – like the ones executed via NTP amplification – over the last few months. NSFOCUS, a security firm that measures DDoS traffic, released its Mid-Year Threat Report...
PT-2014-2002
Name of the Vulnerable Software and Affected Versions Softing FG-100 PB PROFIBUS firmware version FG-x00-PB V2.02.0.00 Description The issue is related to a hardcoded password for the root account in the firmware, allowing remote attackers to gain administrative access via a TELNET session. This ...
Wordpress Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities Google Dork: N/A Date: 09.09.2014 Exploit Author: Fikri Fadzil - email protected Vendor Homepage - http://wpsuportplus.byethost7.com/...
Fedora 19 : kernel-3.14.15-100.fc19 (2014-9142)
The 3.14.15 stable update contains a number of important fixes across the tree. The 3.14.14 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
[SECURITY] Fedora 19 Update: kernel-3.14.15-100.fc19
The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...
Fedora 19 : kernel-3.14.13-100.fc19 (2014-8487)
Update to latest upstream stable release, Linux v3.14.13. Fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Large-Scale DDoS Attacks Continue to Spike
Although the average size of a given DDoS attack is going down, the number of attacks at the upper end of the scale is increasing, with researchers at Arbor Networks reporting more than 100 attacks of 100 Gbps in the first half of this year. In order for a DDoS attack to be effective, bad guys us...
Crystal Reports Viewer 12.0.0.549 - Activex Exploit (PrintControl.dll) 0day
No description provided by source. !-- Crystal Reports Viewer 12.0.0.549 Activex Exploit PrintControl.dll 0-day By = DrIDE File = C:\Program Files\BusinessObjects\Common\4.0\crystalreportviewers12\ActiveXControls\PrintControl.dll method = ServerResourceVersion progid =...
Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...
MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution
No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...
Prozilla Top 100 1.2 - Arbitrary Delete Stats Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered...