shop.aloha-attitude.fr Cross Site Scripting vulnerability OBB-1233786

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

aloha-street.com Cross Site Scripting vulnerability OBB-1220002

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

aloha-street.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1172795 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Mahalo FIN7: Responding to the Criminal Operators’ New Tools and Techniques

During several recent incident response engagements, FireEye Mandiant investigators uncovered new tools in FIN7’s malware arsenal and kept pace as the global criminal operators attempted new evasion techniques. In this blog, we reveal two of FIN7’s new tools that we have called BOOSTWRITE and...

NCR Aloha POS SOAP API Detection

Binary data ncralohaposwebdetect.nbin...

NCR Aloha POS SMB Default Credentials

The remote NCR Aloha POS device is running with default credentials aloha / aloha. A remote, unauthenticated attacker could exploit this to take control of the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108716; scriptversion"1.2"; scriptcvsdate"Date:...

CVE-2014-7333

The Aloha Guide aka com.aloha.guide.japnese application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7317

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7317

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7333

The Aloha Guide aka com.aloha.guide.japnese application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7333

The CVE-2014-7333 entry concerns the Android application Aloha Guide (package com.aloha.guide.japnese) version 1.3, where the app does not verify X.509 certificates from SSL servers. Root cause: missing certificate verification in SSL/TLS, enabling man-in-the-middle attackers to spoof servers and...

CVE-2014-7317

The CVE-2014-7317 entry concerns the Android app Aloha Bail Bonds (com.onesolutionapps.alohabailbondsandroid) version 1.1, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in TLS certificate validation that enables man-in-the-middle attackers to spoof s...

CVE-2014-6812

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6812

The Aloha Guide aka com.aloha.guide.english application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6812

CVE-2014-6812 affects the Android app “The Aloha Guide” (com.aloha.guide.english), version 1.5. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Pub...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6781

CVE-2014-6781 concerns the Aloha Stadium - Hawaii Android app (package com.stadium.aloha), version 1.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certif...

CVE-2014-6781

The Aloha Stadium - Hawaii aka com.stadium.aloha application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...