CVE-2014-6876

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6876

The CVE-2014-6876 entry concerns the American Express Serve Android app (com.serve.mobile). Affected component: SSL/TLS certificate validation in the app; root cause: the application does not verify X.509 certificates from SSL servers. Impact: enables man-in-the-middle attackers to spoof servers ...

CVE-2014-6876: Undefined Security Weakness

The American Express Serve aka com.serve.mobile application @7F0901E4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7552

Name of the Vulnerable Software and Affected Versions American Express Serve application version @7F0901E4 Description The issue concerns the American Express Serve application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof...

[SECURITY] Fedora 21 Update: nodejs-qs-0.6.6-3.fc21

This is a query string parser for node and the browser supporting nesting, as it was removed from 0.3.x, so this library provides the previous and commonly desired behavior and twice as fast. Used by express, connect and others...

PT-2014-6095

Name of the Vulnerable Software and Affected Versions IBM PowerVC Express Edition version 1.2.0 before FixPack3 Description The issue allows remote attackers to discover credentials by sniffing the network, as it establishes an FTP session for transferring files to a managed IVM. Recommendations...

CVE-2014-4750: Exposure of Sensitive Information to an Unauthorized Actor

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network...

qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load

Buffer overflow in hw/pci/pcieaer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large lognum value in a savevm image...

Threat Outbreak Alert RuleID10682: Email Messages Distributing Malicious Software on July 15, 2014

Medium Alert ID: 34937 First Published: 2014 July 15 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10682 may contain the following files: Name | Siz...

SysExporter - Grab data from list-view, tree-view, combo box, WebBrowser control, and text-box

SysExporter utility allows you to grab the data stored in standard list-views, tree-views, list boxes, combo boxes, text-boxes, and WebBrowser/HTML controls from almost any application running on your system, and export it to text, HTML or XML file. Here's some examples for data that you can expo...

Microsoft Outlook Express 5/6 Spoofable File Extensions Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5277/info It is possible for a malicious user, sending email via a mail agent capable of manipulating the MIME headers, to spoof file extensions for users of Outlook Express. For example, an .exe file can be made to look...

Microsoft Outlook Express 5/6 Script Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but appears to have...

PHP Lite Calendar Express 2.2 auth.php cid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

BMC Service Desk Express 10.2.1.95 - Multiple Vulnerabilities

No description provided by source. Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC Multiple vulnerabilities in BMC SERVICE DESK EXPRESS SDE Version 10.2.1.95 Affected Product: BMC SERVICE DESK EXPRESS SDE Version 10.2.1.95 Timeline: 07 June 2013 - Vulnerability found 12 June 20...

Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC

No description provided by source. !/usr/local/bin/perl Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC Vendor: Insight Software Solutions, Inc. Product web page: http://www.macros.com Affected version: 4.2.2.1 and 4.2.1.1 Summary: Macro Express is the premier Windows...

Microsoft Outlook 97/98/2000/4/5 Address Book Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by...

Microsoft Windows Script Host 5.1/5.5 GetObject() File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1718/info It is possible for an outside attacker to view known files on a remote system if the target user visits a website or opens an email containing a specially formed script containing the JScript function 'GetObject...

mIRC 6.1 "IRC" Protocol Remote Buffer Overflow Exploit

No description provided by source. / remote mirc 6.11 exploit by blasty TESTED ON: Windows XP No SP, Ducth Build: 2600.xpclient.010817-1148 A few days ago, I saw a mIRC advisory on packetstorm 1 and was surprised nobody had written an exploit yet. So I decided to start writing one. Since this was...

Microsoft Outlook Express 4.x/5.x/6.0 Attachment Processing File Extension Obfuscation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13837/info Microsoft Outlook Express is prone to an attachment file extension obfuscation vulnerability that may present a risk under certain configurations. The issue manifests due to Microsoft Outlook Express behavior...

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow

No description provided by source. $Id: ms05030nntp.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...