PHP 5.3.x < 5.3.21 cuRL X.509 Certificate Domain Name Matching MiTM Weakness

Binary data 801093.prm...

CVE-2012-4918: Improper Input Validation

Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle MITM attack...

PHP 5.3.x < 5.3.21 cURL X.509 Certificate Domain Name Matching MiTM Weakness

According to its banner, the version of PHP 5.3.x installed on the remote host is prior to 5.3.21. It is, therefore, potentially affected by a weakness in the cURL extension that can allow SSL spoofing and man-in-the-middle attacks. When attempting to validate a certificate, the cURL library...

Platform Independent Network Packet Generator: Hyenae

Platform Independent Network Packet Generator Hyenae is a highly flexible platform independent network packet generator. It allows you to reproduce several MITM, DoS and DDoS attack scenarios, comes with a clusterable remote daemon and an interactive attack assistant. Features ARP-Request floodin...

CVE-2012-0962

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle MITM attack...

CVE-2012-0962

CVE-2012-0962 concerns Aptdaemon 0.43 on Ubuntu 11.10 and 12.04 LTS, where importing PPA GPG keys from a keyserver used short IDs, enabling a man‑in‑the‑middle attack to install arbitrary PPA keys. The Red Hat and NVD records repeat this description. Impact: attacker could influence which reposit...

PT-2012-2978

Name of the Vulnerable Software and Affected Versions Aptdaemon version 0.43 in Ubuntu versions 11.10 and 12.04 LTS Description The issue allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle MITM attack. This is due to Aptdaemon using short IDs when...

CVE-2012-0962: Undefined Security Weakness

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle MITM attack...

Google Android 4.2 Browser and WebView - 'addJavascriptInterface' Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/android' class MetasploitModule OperatingSystems::Match::ANDROID, :arch = ARCHARMLE, :javascript = true, :rank =...

Android Browser and WebView addJavascriptInterface Code Execution

This module exploits a privilege escalation issue in Android use exploit/android/browser/webview/addjavascriptinterface msf undefinedaddjavascriptinterface show actions ...actions... msf undefinedaddjavascriptinterface set ACTION msf undefinedaddjavascriptinterface show options ...show and set...

CVE-2012-0962

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle MITM attack...

USN-1642-1: Lynx vulnerabilities

Dan Rosenberg discovered a heap-based buffer overflow in Lynx. If a user were tricked into opening a specially crafted page, a remote attacker could cause a denial of service via application crash, or possibly execute arbitrary code as the user invoking the program. This issue only affected Ubunt...

Windows Gather FileZilla FTP Server Credential Collection

This module will collect credentials from the FileZilla FTP server if installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Windows Gather FileZilla FTP Server...

Default configuration

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

CVE-2012-3431

The vulnerability CVE-2012-3431 affects the Teiid JDBC socket used by JBoss Enterprise Data Services Platform before 5.3.0, where login messages were not encrypted by default as documented. This enables a man-in-the-middle attacker to obtain login credentials and related JDBC traffic. Remediation...

PT-2012-4706

Name of the Vulnerable Software and Affected Versions Teiid Java Database Connectivity JDBC socket versions prior to 5.3.0 Description The issue allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack because login messages are not encrypted by default, contrary to...

CVE-2012-3431: Undefined Security Weakness

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

Twitter 5.0 Eavesdropping Proof Of Concept

Twitter App vulnerable to eavesdropping Vendor: Twitter Inc. Product: Twitter 5.0 Tested on: iPhone 4 iOS 6.0 Vendor notification: Nov 10, 2012. Risk level: Low Researcher: Carlos Reventlov Link: http://reventlov.com/advisories/twitter-app-vulnerable-to-partial-mitm The Twitter 5.0 app for the...

PT-2012-5682

Name of the Vulnerable Software and Affected Versions Fortinet Fortigate UTM appliances affected versions not specified Description The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and the same private key across different customers'...

CVE-2011-5236

Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...