Design/Logic Flaw

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7118

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7118

The CVE-2014-7118 entry concerns the Itography Item Hunt (com.itography.application) Android app version 3.0.3, which does not verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certi...

CVE-2014-7118: Undefined Security Weakness

The Itography Item Hunt aka com.itography.application application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8455

Name of the Vulnerable Software and Affected Versions C97net Cart Engine versions prior to 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the item id variable in the sql query function in cart.php. The vulnerability can be exploited using...

CVE-2014-6543

Technical details for CVE-2014-6543 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2014-6543

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to ITEM Item & BOM...

PT-2014-7278

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.3 Description The issue affects confidentiality and integrity, and it is related to the ITEM Item & BOM component. Remote authenticated users can exploit this issue. Recommendations For Oracle...

CVE-2014-6543: Undefined Security Weakness

Unspecified vulnerability in the Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to ITEM Item & BOM...

Twiki Perl 4.x, 5.x, 6.x Upload Bypass / Code Execution Vulnerabilities

The debugenableplugins request parameter in Twiki versions 4.x, 5.x, and 6.0.0 allows arbitrary Perl code execution and suffer from a file upload bypass vulnerability. This is an advisory for TWiki administrators: The debugenableplugins request parameter allows arbitrary Perl code execution...

(Plone): Anonymous users can batch change titles of content items

It was discovered that Plone, included as a part of luci, allowed a remote anonymous user to change titles of content items due to improper permissions checks...

Ez Cart 1.0 - Multiple CSRF Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Depot WiFi 1.0.0 iOS - Multiple Vulnerabilities

No description provided by source. Document Title: =============== Depot WiFi v1.0.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1259 Release Date: ============= 2014-04-23 Vulnerability Laboratory ID VL-ID:...

PT-2014-3285

Name of the Vulnerable Software and Affected Versions PHPFox versions 3.7.3 through 3.7.5 Description The issue allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication. This is achieved by sending a request with a modified valitem id...

PDF Album 1.7 iOS - Local File Inclusion

Document Title: =============== PDF Album v1.7 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1255 Release Date: ============= 2014-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 1255...

UBUNTU-CVE-2014-0049

Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancelworkitem data...

PT-2014-1874

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17 Description The issue affects memcached, allowing remote attackers to cause problems with the confidentiality, integrity, and availability of protected information. A specific problem is in the do item get...

NoticeBoardPro 1.x SQL Injection

Author: TUNISIAN CYBER + Exploit Title: NoticeBoardPro v1.X SQL Injection vulnerability + Date: 27-12-2013 + Category: WebApp + Google Dork: n/a + Tested on: KaliLinux + Vendor: http://www.noticeboardpro.com/ +Description: NoticeBoardPro is an online, web-based, notice / bulletin board system...

CVE-2013-2652: Improper Neutralization of Input During Web Page Generation

CRLF injection vulnerability in help/helplanguage.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter...

PT-2013-3869

Name of the Vulnerable Software and Affected Versions WebCollab versions 3.30 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This is achieved via the item parameter in the help/help language.php file...