CVE-2014-7353

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6808

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6808

The CVE-2014-6808 entry concerns the Active 24 Android app (com.zentity.app.active24) version 1.0.1, where SSL/TLS certificate validation is not performed. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The connected...

CVE-2014-6808

The Active 24 aka com.zentity.app.active24 application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Firefox ESR 24.x < 24.8.1 NSS Signature Verification Vulnerability (Mac OS X)

The version of Firefox ESR 24.x installed on the remote host is prior to 24.8.1. It is, therefore, affected by a flaw in the Network Security Services NSS library, which is due to lenient parsing of ASN.1 values involved in a signature and can lead to the forgery of RSA signatures, such as SSL...

Threat Outbreak Alert RuleID11690: Email Messages Distributing Malicious Software on September 24, 2014

Medium Alert ID: 35821 First Published: 2014 September 24 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11690 may contain the following files: Name ...

PayPal Inc BB #71 PPM - Persistent Filter Vulnerability

Document Title: =============== PayPal Inc BB 71 PPM - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=870 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-24 Vulnerability Laboratory ID VL-ID:...

Mozilla Thunderbird 24.x < 24.8 Multiple Vulnerabilities (Mac OS X)

The version of Thunderbird 24.x installed on the remote Mac OS X host is a version prior to 24.8. It is, therefore, affected by the following vulnerabilities : - Multiple memory safety flaws exist within the browser engine. Exploiting these, an attacker can cause a denial of service or execute...

Mozilla Thunderbird 24.x < 24.8 Multiple Vulnerabilities

The version of Thunderbird 24.x installed on the remote host is a version prior to 24.8. It is, therefore, affected by the following vulnerabilities : - Multiple memory safety flaws exist within the browser engine. Exploiting these, an attacker can cause a denial of service or execute arbitrary...

Firefox ESR 24.x < 24.8 Multiple Vulnerabilities

The version of Firefox ESR 24.x installed on the remote host is prior to 24.8. It is, therefore, affected by the following vulnerabilities : - Multiple memory safety flaws exist within the browser engine. Exploiting these, an attacker can cause a denial of service or execute arbitrary code...

Threat Outbreak Alert RuleID11228: Email Messages Distributing Malicious Software on August 24, 2014

Medium Alert ID: 35397 First Published: 2014 August 25 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11228 may contain the following files: Name |...

Fedora 19 : krb5-1.11.3-24.fc19 (2014-8176)

This update incorporates backported upstream fixes for potential crashes caused by attempts to process malformed GSSAPI messages CVE-2014-4341, CVE-2014-4342. It also incorporates fexes for a possible double-free CVE-2014-4343 and a possible NULL pointer dereference CVE-2014-4344 in GSSAPI client...

Threat Outbreak Alert RuleID10780: Email Messages Distributing Malicious Software on July 24, 2014

Medium Alert ID: 35026 First Published: 2014 July 24 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10780 may contain the following files: Name | Siz...

Barracuda WAF - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda WAF - Filter Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1208 Video: http://www.youtube.com/watch?v=-yQVyik3Ggo Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1065 Release Date...

Mozilla Thunderbird 24.x < 24.7 Multiple Vulnerabilities (Mac OS X)

The version of Thunderbird 24.x installed on the remote host is a version prior to 24.7. It is, therefore, affected by the following vulnerabilities : - When a pair of NSSCertificate structures are added to a trust domain and then one of them is removed during use, a use-after-free error occurs...

Mozilla Thunderbird clickjacking Vulnerability-01 (Jul 2014) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities

No description provided by source. Cachelogic Expired Domains Script 1.0 multiple security vulnerabilities Date: 2011-06-22 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-03-24CachelogicExpiredDomainsScript1.0multiplesecurityvulnerabilities/ Software:...

Confixx Pro <= 3.3.1 - (saveserver.php) Remote File Inclusion Vulnerability

No description provided by source. Confixx = PRO 3.3.1 Remote File Inclusion Vulnerability ! Application homepage : http://www.swsoft.com/de/products/confixx/ ! Author : H4 / XPK ! Contact : http://xpkzxc.com/ ! Bug discovered : 2007-07-21 ! Bug published : 2007-07-24 ! Risk : Moderate Do not...

PHPCodeCabinet <= 0.5 (Core.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63800' ssvid version = '1.0' author = '周神' vulDate = '2006-08-09' createDate = '2015-12-24...