Information disclosure

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7374

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7374

The CVE-2014-7374 entry involves the SPIN - Motion Comic (aka me.narr8.android.serial.spin) Android app, version 2.1.7, which fails to verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via a c...

PT-2014-7944

Name of the Vulnerable Software and Affected Versions The SPIN - Motion Comic aka me.narr8.android.serial.spin version 2.1.7 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-7374: Undefined Security Weakness

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

libX11: Multiple integer overflows leading to heap-based buffer-overflows

Multiple integer overflows in X.org libX11 1.5.99.901 1.6 RC1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XQueryFont, 2 XF86BigfontQueryFont, 3 XListFontsWithInfo, 4 XGetMotionEvents, 5 XListHosts, 6...

Apple Motion OZDocument::parseElement Integer Overflow (CVE-2013-6114)

An integer overflow has been reported in Apple Motion 5. The vulnerability is due to lack of validation on "subview" values in a "viewer" tag. A remote unauthenticated attacker can leverage this vulnerability by enticing the user to open a specially crafted .motn file. Successful exploitation may...

Pixel Motion Blog - 'list_article.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28920/info Pixel Motion Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

iClone SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iClone SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.reallusion.com/iclone/ Platform: Windows Price:$199 Author...

Pixel Motion 0 admin/index.php Multiple Field SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful explo...

Pixel Motion 0 index.php date Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful explo...

wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)

Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large record in MPEG data...

Apple Motion buffer overflow

Buffer overflow on .motn files parsing...

APPLE-SA-2013-12-19-1 Motion 5.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-12-19-1 Motion 5.1 Motion 5.1 is now available and addresses the following: Motion Available for: OS X Mavericks v10.9 or later Impact: A maliciously crafted .motn file could lead to arbitrary code execution Description: An integer...

Apple Motion < 5.1 OZDocument::parseElement() Function MOTN File Subview Attribute Handling Integer Overflow

The version of Apple Motion installed on the remote Mac OS X host is earlier than 5.1. As such, it reportedly has an integer overflow in its handling of .motn files that could lead to an out-of-bounds memory access and, in turn, arbitrary code execution. C Tenable Network Security, Inc...

Apple Motion Installed (Mac OS X)

Binary data macosxmotioninstalled.nbin...

xorg-x11-server security and bug fix update

1.13.0-23 - Fix root window damage reports when Xinerama is active 919165 1.13.0-22 - Fix Xephyr crashes in 8 and 16 bit mode 1018405 1.13.0-21 - Fix Damage reports when Xinerama is active 919165 1.13.0-20 - Fix broken Xorg -configure 1016854 - CVE-2013-1940: Fix xf86FlushInput to drain evdev...

CVE-2013-6114

Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service application crash via a 1 large or 2 small value in the subview attribute of a viewer element in a .motn file...

Integer overflow

Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service application crash via a 1 large or 2 small value in the subview attribute of a viewer element in a .motn file...

CVE-2013-6114

CVE-2013-6114 affects Apple Motion up to version 5.0.7, where an integer overflow in OZDocument::parseElement can be triggered by a crafted .motn file’s viewer/subview attribute, potentially causing an application crash (denial of service) for remote attackers. The issue arises from handling of v...