4992 matches found
CVE-2014-5710
The CVE-2014-5710 entry refers to the Cisco Class Locator Fast Lane Android app (package com.tabletkings.mycompany.fastlane.cisco) that does not verify X.509 certificates for SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via crafted certificat...
CVE-2014-5775
CVE-2014-5775 concerns the Android app The Super Fast Browser (iron.web.jalepano.browser) , version 2.0.5.6 , which does not verify X.509 certificates from SSL servers. This allows an attacker to perform a man-in-the-middle attack and obtain sensitive information via a crafted certificate. The av...
Input validation
The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5655
CM Browser - Fast & Secure (com.ksmobile.cb) for Android 5.0.50 does not verify X.509 certificates from SSL servers, enabling MITM via crafted certificates. Root cause: lack of server certificate verification in SSL/TLS validation. Impact: potential exposure of sensitive information. Exploitation...
PT-2014-6760
Name of the Vulnerable Software and Affected Versions The Super Fast Browser aka iron.web.jalepano.browser version 2.0.5.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
PT-2014-6695
Name of the Vulnerable Software and Affected Versions Cisco Class Locator Fast Lane affected versions not specified Description The issue concerns the Cisco Class Locator Fast Lane application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle...
PT-2014-6640
Name of the Vulnerable Software and Affected Versions CM Browser - Fast & Secure aka com.ksmobile.cb version 5.0.50 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
CVE-2014-5655: Undefined Security Weakness
The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5710: Undefined Security Weakness
The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5775: Undefined Security Weakness
The Super Fast Browser aka iron.web.jalepano.browser application 2.0.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Fast payment and some credit card functions whether there is a defect? Know Bank card number and Expiration Date can consumer-vulnerability warning-the black bar safety net
Someone once broke a credit card just know the card number and expiration date on the CAN in some of the website on any purchase, while various payment products such as tenpay, Alipay launched fast pay only need to provide Bank card number, ID number, name, and phone number can be opened fast...
WAF-FLE v0.6.4 - OpenSource ModSecurity Console
WAF-FLE is a OpenSource ModSecurity Console, allows modsecurity admin to store, view and search events sent by sensors using a graphical dashboard to drill-down and find quickly the most relevant events. It is designed to be fast and flexible, while keeping a powerful and easy to use filter, with...
NewGOZ Gameover Zeus Botnet Rebuilds
It didn’t take long for an updated version of GameOver Zeus to make some headway in rebuilding itself. Research published today from Arbor Networks demonstrates that cybercriminals behind GameOver Zeus, which was taken down by law enforcement in early June, have renewed the botnet with at least...
Sagem Fast 3304-V1 - Denial Of Service Vulnerability
No description provided by source. Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page :...
Sagem Fast 3304-V1 - Denial Of Service Vulnerability
Exploit for hardware platform in category dos / poc Title : Sagem email protected 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem email protected 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact :...
Sagem Fast 3304-V1 - Denial of Service
Sagem Fast 3304-V1 - Denial of Service Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page :...
[SECURITY] Fedora 20 Update: lz4-r119-1.fc20
LZ4 is an extremely fast loss-less compression algorithm, providing compres sion speed at 400 MB/s per core, scalable with multi-core CPU. It also features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed limits on multi-core systems...
[SECURITY] Fedora 20 Update: lzo-2.08-1.fc20
LZO is a portable lossless data compression library written in ANSI C. It offers pretty fast compression and very fast decompression. Decompression requires no memory. In addition there are slower compression levels achieving a quite competitive compression ratio while still decompressing at this...
Web Wiz Forums 9.68 SQLi Vulnerability
No description provided by source. ========================================= Web Wiz Forums 9.68 SQLi Vulnerability ========================================= Name : Web Wiz Forums 9.68 SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.webwiz.co.uk/webwizforums/ Platform: Windows...