CVE-2016-4875

Multiple cross-site scripting XSS vulnerabilities in the IVYWE 1 Assist plugin before 1.1.2.test20160906, 2 dataBox plugin before 0.0.0.20160906, and 3 userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

iButton Assist - Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application iButton Assist published at the 'play' market has multiple vulnerabilities...

Multiple plugins for Geeklog IVYWE edition vulnerable to cross-site scripting

Overview Geeklog is an open source content management system CMS. The Geeklog IVYWE edition plugins Assist, dataBox, and userBox each contain a cross-site scripting CWE-79 vulnerability. IVY WE CO.,LTD. reported this vulnerability to IPA and JPCERT/CC to notify users of its solution through JVN...

Smart Assist - Customized SSL, Insecure KeyStore, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Smart Assist published at the 'play' market has multiple vulnerabilities...

Jabra Assist - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Jabra Assist published at the 'play' market has multiple vulnerabilities...

CVE-2014-7608

The Carrier Enterprise HVAC Assist aka com.es.CE application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7486

The Mitsubishi Road Assist aka com.agero.mitsubishi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Mitsubishi Road Assist aka com.agero.mitsubishi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7608

CVE-2014-7608 affects the Carrier Enterprise HVAC Assist (com.es.CE) Android app (v4.0). The issue is that the app does not verify X.509 TLS certificates when connecting to SSL servers, allowing MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. This a...

CVE-2014-7486

The CVE-2014-7486 entry concerns the Mitsubishi Road Assist (com.agero.mitsubishi) Android app version 1.0. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and glean sensitive information via a cra...

CVE-2014-7608

The Carrier Enterprise HVAC Assist aka com.es.CE application 4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7486

The Mitsubishi Road Assist aka com.agero.mitsubishi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6748

The GEMAIRE's HVAC Assist aka com.es.Gemaire application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GEMAIRE's HVAC Assist aka com.es.Gemaire application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6748

The GEMAIRE's HVAC Assist aka com.es.Gemaire application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6748

The CVE-2014-6748 entry concerns the GEMAIRE HVAC Assist Android app (5.0, com.es.Gemaire). The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The availabl...

HR Assist <= 1.05 (vdateUsr.asp) Remote Login ByPass Vulnerability

No description provided by source. Title : HR Assist = 1.05 vdateUsr.asp Remote Login ByPass SQL Injection Author : ajann Page : http://www.ezhrs.com Contact : : $$$ : $45 Example: http://target/path/ UserName: ' union select 0,0,0,0,0,0,0,0,0,0,0,0,0 from admin ajann,Turkey ... Im not Hacker!...

[SECURITY] Fedora 17 Update: kmousetool-4.10.4-1.fc17

A program for people whom it hurts to click the mouse...

CVE-2009-4557

Cross-site scripting XSS vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, allows remote authenticated users, with image-node creation privileges, t...

Code injection

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the 1...