CVE-2014-5577

AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...

CVE-2014-5577

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5635

The CVE-2014-5635 entry concerns the Android app Buy Yorkshire Conference (com.gotfocus.buyyorkshire) version 1.4, which fails to verify X.509 certificates from SSL servers. This creates a certificate validation bypass, allowing man-in-the-middle attackers to spoof legitimate servers and extract ...

CVE-2014-5757: Undefined Security Weakness

The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5577: Undefined Security Weakness

The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736: Undefined Security Weakness

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5635: Undefined Security Weakness

The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735: Undefined Security Weakness

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5756: Undefined Security Weakness

The Buy 99 Cents Only Products aka com.ww99CentsOnlyStores application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5734: Undefined Security Weakness

The Buy Books aka com.wBooksForSale application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Auktionshaus 4 - news.php SQL Injection Vulnerability

No description provided by source. Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter...

Dimensions buy system sql vulnerability affects to the latest 4. Version 2-bug warning-the black bar safety net

Before using this buy system of the free don't know how to now start charging like This vulnerability also in several low version has always been there! Vulnerability file: app/source/articleshow.php ? php if $REQUEST "m" == "Article" && $REQUEST "a" == "showByUname" $uname = $REQUEST"uname"; //n...

Easy to buy program SQL injection vulnerability-vulnerability warning-the black bar safety net

Easy to buy management system is a positioning high-end market group buying content management system,to the lowest cost,minimal human input in the shortest time to set up a fully functional, excellent performance, huge size and easy to maintain website platform. Not filtered lead injection ! ! T...

The top-dimensional group buy navigation sql injection vulnerability analysis-vulnerability warning-the black bar safety net

Just opened, it is found that their number is blacklisted, the speed of the back posts, the tension?, the speed got a system to look at, okay, I admit I just looked under the array is not filtered directly submitted to the query statement, the vulnerability to ask in the userModule. class. php fi...

IceWarp Software LFI / Arbitary File Upload Vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

Consultech CMS Blind SQL Injection

Exploit Title: Consultech cms Blind Sql Injection Google Dork: inurl:buy-results.asp?agentlistings intext:Powered by Consultech Date: 08/22/2012 Author: Crim3R Vendor Home : http://www.consultech.net/ Tested on: all ================================== the agentlistings parametr is agentlistings to...

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...

Most soil buy the system blind and cookie spoofing vulnerability analysis-vulnerability warning-the black bar safety net

Release date: 2010-10. 2 3 Publishing author: l4yn3 Affected versions: unknown Official address: http://www.zuitu.com/ Vulnerability type: Cookie spoofing, SQL injection Vulnerability Description: The most soil group purchase system is a domestic famous group purchase program in the domestic grou...

In Application Security, Good Enough Isn't

SAN FRANCISCO–There’s the old joke about two hunters running from a lion, and the one runner says to the other: we can’t outrun the lion. And his buddy replied, “I don’t have to outrun the lion, I only have to outrun you.” Many, over the years, have applied the same logic to application security:...

Datetopia Buy Dating Site - Cross-Site Scripting

Datetopia Buy Dating Site - Cross-Site Scripting source: https://www.securityfocus.com/bid/42973/info Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...