PT-2014-6437

Name of the Vulnerable Software and Affected Versions Adaptive Computing Moab versions prior to 7.2.9 Adaptive Computing Moab version 8 before 8.0.0 Description The issue allows remote authenticated users to impersonate arbitrary users via the actor field in a message, due to the lack of validati...

CVE-2014-5376: Improper Input Validation

Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when a pre-generated key is used, does not validate that the requesting user matches the actor in the message, which allows remote authenticated users to impersonate arbitrary users via the actor field in a message...

Moab Workload Manage 7.2.9 / 8 User Impersonation Vulnerability

Moab versions prior to 7.2.9 and 8 suffer from a user impersonation vulnerability. Moab User Impersonation : CVE-2014-5375 Software: Moab Affected Versions: All current versions of Moab. However, the impact is limited in Moab 7.2.9 and Moab 8. CVE Reference: CVE-2014-5375 Author: John Fitzpatrick...

CVE-2014-6271

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcg...

CVE-2014-5962

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5962

The CVE-2014-5962 entry concerns the Android app Guess The Actor (com.gamelikeinc.actors) version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

PT-2014-6947

Name of the Vulnerable Software and Affected Versions The Guess The Actor aka com.gamelikeinc.actors application version 1.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-5962: Undefined Security Weakness

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Pen Testing Using Live Malware Becoming a Must

BERLIN–Penetration testing has come a long way in the last decade, evolving from a somewhat controversial practice to a de facto best practice in the enterprise market. That evolution hasn’t stopped by any means, and one of the things that experts say must be a part of any comprehensive test now ...

Web page security vulnerability detection - hidden field-vulnerability warning-the black bar safety net

Some poorly designed web site system may contain a lot of may be the use of security vulnerabilities, these security vulnerabilities as giving the remote attacker to open a backdoor, so an attacker can easily perform some malicious attack. For example, the Common Vulnerabilities and Exposures...

The rise of the chaotic actor

The past year saw the emergence of a series of cleverly named hacking groups like Anonymous, LulzSec, and TeaMp0isoN. In 2011, these groups brought the fight to corporate America, crippling firms both small HBGary Federal and large Sony. As the year drew to a close these groups noticeably shifted...

Hrithikrules.com Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: www.hrithikrules.com XSS vulnerability Date: 12/12/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : ©2010 HrithikRules.com site info : Hrithikrules is the...

Official Website of Will Smith's Daughter Willow Smith Hacked

Official Website of Will Smith's Daughter Willow Smith Hacked Today a Hacker with name BLaCk SPECTRE hack and Deface the Official Website of Willow Smith .Willow is the daughter of musician-actor Will Smith and actress Jada Pinkett Smith. May be this attack is just for fun, as no message is poste...

CVE-2003-1188: Undefined Security Weakness

Unichat allows remote attackers to cause a denial of service crash by adding extra chat characters avatars and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit...

CVE-1999-0372: Exposure of Sensitive Information to an Unauthorized Actor

The installer for BackOffice Server includes account names and passwords in a setup file reboot.ini which is not deleted...