b2evolution 'filemanager' cross-site scripting vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution 'filemanager'. The blogs/admin.php script fails to adequately filter the 'fmfilter' parameter. A remote attacker can exploit the...

AirHopper Steals Data From Air-Gapped Computers

Air-gapped computers are generally the home of sacrosanct data. The lack of a connection between these machines and others on a network, or the Internet, means in theory that data stored on those devices is kept away from the harm of web-based threats and hackers moving laterally on a network...

AirHopper — Hacking Into an Isolated Computer Using FM Radio Signals

In order to secure sensitive information such as Finance, many companies and government agencies generally use totally secure computer systems by making sure it aren't connected to any network at all. But the most secure systems aren't safe anymore. Security researchers at the Cyber Security Labs...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7667

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7638

The Fabuestereo 88.1 FM aka com.nobexinc.wls27892411.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7638

The Fabuestereo 88.1 FM aka com.nobexinc.wls27892411.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7667

The Coca-Cola FM Honduras aka com.enyetech.radio.cocacola.fmhn application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

CVE-2014-7798 affects the Coca-Cola FM Brasil Android app (com.enyetech.radio.coca_cola.fm_br, version 2.0.41709). The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MitM attackers to spoof servers and access sensitive information via a...

CVE-2014-7638

The CVE-2014-7638 entry concerns the Fabuestereo 88.1 FM Android app (package com.nobexinc.wls_27892411.rc), version 3.2.3. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensiti...

CVE-2014-7667

The Coca-Cola FM Honduras Android app (com.enyetech.radio.coca_cola.fm_hn) version 2.0.41725 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The provided documents do not specify...

CVE-2014-7484

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Nova 92.1 FM aka com.wNova921FM application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

The Coca-Cola FM Guatemala aka com.enyetech.radio.cocacola.fmgu application 2.0.41725 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7520

The Nova 92.1 FM aka com.wNova921FM application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7484

CVE-2014-7484 affects the Coca-Cola FM Guatemala Android app (com.enyetech.radio.coca_cola.fm_gu) version 2.0.41725. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificat...