CVE-2014-5674

CVE-2014-5674 affects the PicsArt Photo Studio Android app (com.picsart.studio), up to version 4.5.5, by not validating SSL certificates. The vulnerability enables MITM attackers to spoof servers and access sensitive data. Public sources describe the root cause as improper certificate validation,...

Moodle 2.5.0-1 (badges/external.php) PHP Object Injection Vulnerability

============================================= - Original release date: 15 September, 2013 - Discovered by: Emilio Pinna Application Security Analyst at Abinsula - Contact: emilio pinn gmail ============================================= VULNERABILITY ---------------------- Moodle CMS version 2.5.0...

Moodle CMS 2.5.0-1 Cross Site Scripting Vulnerability

Moodle CMS version 2.5.0-1 suffers from a cross site scripting vulnerability. ============================================= - Original release date: 15 September, 2013 - Discovered by: Emilio Pinna Application Security Analyst at Abinsula - Contact: emilio pinn gmail...

CVE-2013-5674

badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object injection attacks via unspecified vectors, as demonstrated by overwriting the value of the userid...

CVE-2013-5674

Moodle 2.5.x (before 2.5.2) is vulnerable in badges/external.php where unserializing a description of an external badge allows PHP object injection via unspecified vectors, demonstrated by overwriting the userid value. This can enable remote manipulation and has partial impact on confidentiality/...

Moodle CMS 2.5.0-1 Cross Site Scripting

============================================= - Original release date: 15 September, 2013 - Discovered by: Emilio Pinna Application Security Analyst at Abinsula - Contact: emilio pinn gmail ============================================= VULNERABILITY ---------------------- Moodle CMS version 2.5.0...

CVE-2012-5674

Adobe ColdFusion 10 on IIS is affected by an unspecified denial-of-service vulnerability before Update 5. The issue, limited to when IIS is used, allows DoS via unknown vectors and is addressed by applying Update 5 (or later). Affected product/version: ColdFusion 10 with IIS prior to Update 5; ro...

CVE-2008-5674

Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service device crash and read portions of memory via 1 an invalid camnum parameter to the pocketpc component and 2 an invalid...

CVE-2008-2488

creationtimestamp| type| source ---|---|--- 2008-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5674...

CVE-2007-5674

CVE-2007-5674 concerns InstaGuide Weather (aka Weather for PHP) 1.0. a directory traversal flaw in index.php allows remote attackers to include and execute arbitrary local files through a .. in the PageName parameter when magic_quotes_gpc is disabled. Affected component is the web application’s i...