Information disclosure

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7017

The CVE-2014-7017 entry describes an Android app, Tim Ban Bon Phuong (com.entertaiment.timbanbonphuong) version 2.2, that does not verify SSL/TLS X.509 certificates. This misconfiguration in the app’s network code enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...

CVE-2014-7017

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7017: Undefined Security Weakness

The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

WordPress WP-Ban 1.62 Bypass Vulnerability

WordPress WP-Ban plugin version 1.62 suffers from a bypass vulnerability when a properly minted X-Forwarded-For header is used. Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report:...

WP-Ban < 1.64 BlackList Bypass

The WP-Ban WordPress plugin was affected by security vulnerability...

WordPress WP-Ban 1.62 Bypass

Details ================ Software: WP-Ban Version: 1.62 Homepage: http://wordpress.org/plugins/wp-ban/ Advisory report: https://security.dxw.com/advisories/vulnerability-in-wp-ban-allows-visitors-to-bypass-the-ip-blacklist-in-some-configurations/ CVE: CVE-2014-6230 CVSS: 5 Medium;...

WordPress WP Ban Plugin <= 1.6.3 - BYPASS

Because of this vulnerability, the attackers can bypass the IP blacklist via a crafted X-Forwarded-For header. Solution Update the plugin...

Debian DSA-2979-1 : fail2ban - security update

Two vulnerabilities were discovered in Fail2ban, a solution to ban hosts that cause multiple authentication errors. When using Fail2ban to monitor Postfix or Cyrus IMAP logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses,...

[SECURITY] [DSA 2979-1] fail2ban security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2979-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 17, 2014 http://www.debian.org/security/faq -...

DSA-2979-1 fail2ban - security update

Bulletin has no description...

SHOUTcast Server <= 1.9.8/win32 - CSRF Vulnerability

No description provided by source. Exploit Title: HOUTcast Server Version = 1.9.8/win32 Cross Site Request Forgery. Date: 22/12/2009 Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com Software Link: http://www.shoutcast.com/download Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP:...

SourceBans 1.4.7 XSS Vulnerability

No description provided by source. Exploit Title: SourceBans Version 1.4.7 XSS Google Dork: inurl:sourcebans/index.php?p=submit Date: Feb. 9th 2011 Author: Sw1tCh Software Link: http://www.sourcebans.net/ Version: 1.4.7 Info: SourceBans is an application for managing publicly the banned users for...

Diferior CMS 8.03 Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: Diferior CMS 8.03 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF P...

Uploadscript 1.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...

CuteNews <= 1.4.6 (ip ban) XSS/Command Execution Exploit (adm req.)

No description provided by source. !/usr/bin/php -q ?php / CuteNews = 1.4.6 ip ban XSS / Remote Command Execution Exploit by athos - stakerathotmaildotit http://cutephp.com -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-- Remote Command Execution...

hMailServer 5.3.3 IMAP Remote Crash PoC

No description provided by source. Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC Date: 10/27/2012 Vendor Homepage: http://hmailserver.com Software Link: http://www.hmailserver.com/index.php?page=backgrounddownloadfile&downloadid=207 Version: hMailServer 5.3.3 - Build 1879 Tested on: -...

China Bans Microsoft Windows 8 for Government Computers

While US government is always prohibiting the purchase of Huawei products due to suspected backdoors from the Chinese government, China also keep itself totally apart from the US productions. China is a bit famous for using its own operating systems, smartphone application services and lots more,...

How to access Twitter in Turkey - #TwitterisBlockedinTurkey

Twitter, the biggest Social Media platform used for vital communication is now banned in Turkey from the last few days, after Prime Minister Recep Tayyip Erdoğan promised to root out the social media service during an election rally this week with the help of a court order. “Twitter and so on, we...

程氏舞曲CMS最新php版本高危SQL注入漏洞

简要描述： 注入毫无限制！ 详细说明： 昨天刚下载的源码（应该最新的吧...） bug文件位置：https://images.seebug.org/upload/app/models/csdjskins.php第3466行 function GetIP //定义了一个获取ip地址的函数 if getenv"HTTPCLIENTIP" && strcasecmpgetenv"HTTPCLIENTIP", "unknown" //换取ip地址，如果存在，则使用clientip。 $ip = getenv"HTTPCLIENTIP"; else if...