CVE-2014-6751

The Grasshopper Beta aka com.grasshopper.dialer application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6751

The CVE-2014-6751 entry covers the Grasshopper Beta (com.grasshopper.dialer) Android app version 2.1, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attacks to spoof servers and exfiltrate sensitive information. The NVD rep...

CVE-2014-5943

The CVE-2014-5943 entry concerns LabMSF Antivirus beta (aka com.ReSync.RNGN) 1.0.2 for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Supported documents confi...

PT-2014-2312 · Plone +1 · Plone +1

Name of the Vulnerable Software and Affected Versions: Plone versions prior to 4.2.3 Plone version 4.3 before beta 1 Description: The issue allows remote attackers to execute Python code via unspecified vectors, related to the admin interface. This is possible due to a problem in the...

PT-2014-2326 · Plone +1 · Plone +1

Name of the Vulnerable Software and Affected Versions: Plone versions prior to 4.2.3 Plone versions 4.3 before beta 1 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large value. This is related to the formatColumns function...

PT-2014-2324 · Plone Foundation +1 · Plone +1

Name of the Vulnerable Software and Affected Versions: Plone versions prior to 4.2.3 Plone versions 4.3 prior to beta 1 Description: The issue allows remote attackers to enumerate user account names via a crafted URL. This is related to the membership tool.py script. Recommendations: For Plone...

MyBB 1.8 Beta 3 Cross Site Scripting / SQL Injection

Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...

WordPress GeoPlaces4 and GeoPlaces4 Beta Themes - Shell Upload

These WordPress themes are prone to a shell upload vulnerability. It allows an attacker to execute arbitrary PHP code. Solution Update the theme...

C99.php Shell - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: C99 Shell Authentication Bypass via Backdoor Google Dork: inurl:c99.php Date: June 23, 2014 Exploit Author: mandatory Matthew Bryant Vendor Homepage: http://ccteam.ru/ Software Link: https://www.google.com/ Version: ", " ",...

FengCMS新版本重装

简要描述： FengCms Beta 1.20 管理这样判断冒是那里不对啊。 详细说明： 用switch做判断，真的搞不懂程序猿是怎么想的啊，这里的step变量可以控制，导致重装程序。 switch$GET'step' case '1': //安装许可协议 include ABSPATH."/step/step1.php"; break; case '2': //检查安装环境是否满足要求 $PHPGD = ''; ifextensionloaded'gd' iffunctionexists'imagepng' $PHPGD .= 'png';...

phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit

No description provided by source...

SmartMail Server 1.0 BETA 10 Oversized Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6075/info SmartMail Server is reported to be prone to a remote denial of service condition. It is possible to trigger this condition by sending large amounts 5MB+ of data to the server via TCP port 25 or 110. SmartMail...

DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...

Upload-Point 1.6 Beta - Upload Shell Vulnerability

No description provided by source. ======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Alger...

DCShop Beta 1.0 Form Manipulation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files .setu...

JSPWiki <= 2.5.139 UserPreferences.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

Nuked-Klan 1.3 - Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6917/info A vulnerability has been discovered in Nuked-Klan which may be exploited to execute certain PHP functions on a target server. This issue occurs in the 'Team', 'News', and 'Lien' modules and is due to insufficien...

Affiliate Market 0.1 BETA - XSS / SQL Injection Exploit

No description provided by source. !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

ShareCMS 0.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

dynamic flash forum 1.0 beta Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: Dynamic Flash Forum + Version: 1.0 Beta + Website: http://df2.sourceforge.net/ + Bugs: A Information Disclosure B Authentication Bypass C Multiple SQL Injection + Exploitation: Remote + Date: 09 Apr 2009 + Discovered by...