CVE-2014-5925: Undefined Security Weakness

The 10000 Kindle Books Downloads aka com.ww10000KindleBooksLatestnBestSellers application 0.312 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6910

Name of the Vulnerable Software and Affected Versions The 10000 Kindle Books Downloads application version 0.312 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

Israeli Think-Tank Site Serves Sweet Orange Exploit

Attackers have compromised the website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA. On Friday, researchers from Cyphort reported that the site was serving the Sweet Orange exploit kit via drive-by download. At the time o...

Delightful Downloads 1.3.1.1 - includes/functions.php User-Agent HTTP Header Stored XSS

The Delightful Downloads WordPress plugin was affected by an includes/functions.php User-Agent HTTP Header Stored XSS security vulnerability...

Delightful Downloads 1.3.1.1 - meta-boxes.php dedo_meta_boxes_save Function Multiple Action Authorization Bypass

The Delightful Downloads WordPress plugin was affected by a meta-boxes.php dedometaboxessave Function Multiple Action Authorization Bypass security vulnerability...

SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/emailform.php Multiple Parameter Reflected XSS security vulnerability...

SS Downloads 1.4.4.1 - templates/emailsent.php Multiple Parameter Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/emailsent.php Multiple Parameter Reflected XSS security vulnerability...

SS Downloads 1.4.4.1 - templates/email&nameform.php Multiple Parameter Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/email&nameform.php; Multiple Parameter Reflected XSS security vulnerability...

Paid Downloads <= 2.01 - SQL Injection

The Paid Downloads WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Delightful Downloads Plugin <= 1.3.1.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in includes/functions.php User-Agent HTTP header. Solution Update the plugin...

WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS

This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...

WordPress Delightful Downloads Plugin <= 1.3.1.1 - BYPASS

This plugin is prone to a bypass vulnerability in meta-boxes.php dedometaboxessave function. Solution Update the plugin...

CVE-2014-2356

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...

Cross site request forgery (csrf)

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request...

CVE-2014-2356

CVE-2014-2356 affects Innominate mGuard devices. Affected firmware prior to 7.6.4 and 8.x before 8.0.3 allow remote attackers to download configuration snapshots via a crafted HTTPS request without authentication, enabling unauthorized information disclosure (network exposure). The ICS-CERT advis...

PT-2014-4645

Name of the Vulnerable Software and Affected Versions Innominate mGuard versions prior to 7.6.4 Innominate mGuard versions 8.x prior to 8.0.3 Description The issue allows remote attackers to obtain sensitive information without requiring authentication for snapshot downloads. This can be achieved...

Mozilla Improves Malware Blocking in Firefox 31

Attackers have any number of methods for getting their malware onto users’ machines, but one of the easier and more effective ones is through drive-by downloads. Browser vendors have been adding defenses to mitigate this threat for some time, and the newest version of Mozilla Firefox includes an...

CVE-2014-4554

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2014-4554

The CVE concerns the WordPress SS Downloads plugin (templates/download.php) where an XSS vulnerability allows an attacker to inject arbitrary script/HTML via the title parameter in versions before 1.5. Impact is remote script injection; no exploitation details are provided in the documents. Remed...