CVE-2014-7008

The CVE-2014-7008 entry affects the Forum FrAndroid beta Android app (version 3.4.3) and is caused by the app not verifying SSL X.509 certificates when connecting to servers, enabling potential man-in-the-middle attacks to spoof servers and access sensitive data via crafted certificates. The prov...

Easy file sharing web server - persist XSS in forum msgs

I saw a posting a month or 2 ago for a BOF in an FTP server belonging to EFS Software here: http://www.securityfocus.com/bid/19243 At first there was no additional details provided and I hunted up and down before finding it after some fuzzing stack smash in password. While on the hunt, I found on...

Kunena Forum Extension for Joomla Multiple Reflected Cross-Site Scripting Vulnerabilities

Kunena forum extension for Joomla multiple reflected cross-site scripting vulnerabilities Class: Input Validation Error CVE N/A Remote Yes Local No Published 02/07/2014 Credit Raymond Rizk of Dionach [email protected] Vendor Kunena Vulnerable Kunena v3.0.5 Solution Status: Fixed by Vendor Kunena...

Updated chromium-browser-stable packages fix security vulnerabilites

Updated chromium-browser-stable packages fix security vulnerabilities: Several security issues and other bugs have been fixed since our previous update. See the upstream release announcements for details. Note that as of version 35, the Chromium browser no longer supports browser plugins, includi...

MGASA-2014-0413 Updated chromium-browser-stable packages fix security vulnerabilites

Updated chromium-browser-stable packages fix security vulnerabilities: Several security issues and other bugs have been fixed since our previous update. See the upstream release announcements for details. Note that as of version 35, the Chromium browser no longer supports browser plugins, includi...

forum.faak.ru Open Redirect vulnerability

Vulnerable URL: http://forum.faak.ru/redirect.php?url=http://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:00 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6925

CVE-2014-6925 affects the Steyr Forum Android app (version 3.9.12). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The CVE-2014-6908 entry concerns the Forum IC app (com.tapatalk.forumimmigrercom) for Android, version 3.3.12, which does not verify X.509 certificates from SSL servers. This trust failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2014-6925

The Steyr Forum aka com.tapatalk.steyrclubcomvb application 3.9.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6861

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6861

The Terrarienbilder.com Forum aka com.tapatalk.terrarienbildercomvb application 3.8.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6861

The CVE-2014-6861 entry concerns the Terrarienbilder.com Forum Android app (version 3.8.20) which does not verify X.509 certificates from SSL servers. This enables MITM attackers to spoof servers and retrieve sensitive information via crafted certificates. The connected records confirm the affect...

RBS Change Complet Open Source Cross Site Request Forgery

Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link: http://www.rbschange.fr/addons/distributions/RBS-Change-complet-Open-Source,67203.html Version: 3.6.8...

RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery

RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...