8126 matches found
CVE-2014-6908
The CVE-2014-6908 entry concerns the Forum IC app (com.tapatalk.forumimmigrercom) for Android, version 3.3.12, which does not verify X.509 certificates from SSL servers. This trust failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...
CVE-2014-6925
CVE-2014-6925 affects the Steyr Forum Android app (version 3.9.12). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents...
CVE-2014-6925
The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6925: Undefined Security Weakness
The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6908: Undefined Security Weakness
The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7601
Name of the Vulnerable Software and Affected Versions Steyr Forum aka com.tapatalk.steyrclubcomvb version 3.9.12 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
PT-2014-7143
Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for creating posts. Recommendations For versions prior to 1.9.3, update to version 1.9.3...
PT-2014-7142
Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This is achieved by accessing the uploaded file via unspecified vectors...
PT-2014-7141
Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.9.3, update to version 1.9.3 or later to...
CVE-2014-6861
The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6861
The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6861
The CVE-2014-6861 entry concerns the Terrarienbilder.com Forum Android app (version 3.8.20) which does not verify X.509 certificates from SSL servers. This enables MITM attackers to spoof servers and retrieve sensitive information via crafted certificates. The connected records confirm the affect...
CVE-2014-6861: Undefined Security Weakness
The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
RBS Change Complet Open Source Cross Site Request Forgery
Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link: http://www.rbschange.fr/addons/distributions/RBS-Change-complet-Open-Source,67203.html Version: 3.6.8...
RBS Change Complet Open Source 3.6.8 - CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...
RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery
RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...
RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery
Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link: http://www.rbschange.fr/addons/distributions/RBS-Change-complet-Open-Source,67203.html Version: 3.6.8...
CVE-2014-6832
The Bersa Forum aka com.gcspublishing.bersaforum application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Bersa Forum aka com.gcspublishing.bersaforum application 3.9.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...