Zen Cart 1.5.3 - Multiple Vulnerabilities

No description provided by source. Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

CVE-2014-5728

The Vevo - Watch HD Music Videos aka com.vevo application 2.0.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5560

The Popscene Music Industry Sim aka air.Popscene application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5560

The CVE-2014-5560 entry concerns the Android app Popscene (Music Industry Sim) / air.Popscene version 1.04 that fails to verify SSL X.509 certificates. Root cause: missing certificate validation in SSL/TLS connections, which can allow MITM attackers to spoof servers and capture/reveal sensitive i...

CVE-2014-5560

The Popscene Music Industry Sim aka air.Popscene application 1.04 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Zen Cart 1.5.3 - Multiple Vulnerabilities Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id. localhost/zen/zen-cart-v1.5.3-07042014/admin123/profiles.php?action=delete&profile=2 - Reset layou...

[SECURITY] Fedora 20 Update: libimobiledevice-1.1.6-2.fc20

libimobiledevice is a library for connecting to mobile devices including ph ones and music players...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Air Transfer Iphone 1.3.9 Multiple Vulnerabilities

Air Transfer Iphone version 1.3.9 suffers from remote denial of service and unauthenticated file access vulnerabilities. Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor...

ModPlug XMMS Plugin: Multiple vulnerabilities

Background ModPlug XMMS Plugin is a library for playing MOD-like music files Description Multiple vulnerabilities have been discovered in ModPlug XMMS Plugin. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the...

Music - Multiple Script Direct Request Path Disclosure

The Music WordPress theme was affected by a Multiple Script Direct Request Path Disclosure security vulnerability...

background-music 1.0 - jPlayer.swf XSS

The background-music WordPress plugin was affected by a jPlayer.swf XSS security vulnerability...

ZooEffect 1.08 - HTTP Referer Reflected XSS

Description The ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 WordPress plugin was affected by a HTTP Referer Reflected XSS security vulnerability...

WordPress Music Theme - Full Path Disclosure

Because of this vulnerability, the attackers can obtain sensitive information via an invalid upload request. Solution Update the theme...

[SECURITY] Fedora 20 Update: sidplayfp-1.2.0-2.fc20

A player for playing SID music modules originally created on the Commodore 64 and compatibles...

[SECURITY] Fedora 20 Update: libmikmod-3.3.6-3.fc20

libmikmod is a library used by the mikmod MOD music file player for UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM, XM, ULT and IT...

Zen Cart 1.5.3 - CSRF & Admin Panel XSS

Exploit for php platform in category web applications Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Digital Music Pad 8.2.3.3.4 - SEH overflow Metasploit Module

No description provided by source. Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...