CVE-2014-6927

The Myanmar Housing : mmHome aka com.mmhome3 application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Myanmar Housing : mmHome aka com.mmhome3 application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6927

The CVE-2014-6927 entry affects the Myanmar Housing mmHome Android app (com.mmhome3) version 1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation ...

CVE-2014-6927

The Myanmar Housing : mmHome aka com.mmhome3 application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

zFTP Server "cwd/stat" Remote Denial-of-Service

No description provided by source. !/usr/bin/python Exploit Title: zFTP Server cwd Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe YGN Ethical Hacker Group, Myanmar - http://yehg.net/ Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c M...

Gmail warning Myanmar Journalists about State-sponsored attacks

Several Myanmar journalists have recently received warnings from Google that their Gmail accounts may have been targets of state-sponsored attacks. After they login to their Gmail accounts, warning message,"We believe state-sponsored attackers may be attempting to compromise your account or...

Gmail warning Myanmar Journalists about State-sponsored attacks

Several Myanmar journalists have recently received warnings from Google that their Gmail accounts may have been targets of state-sponsored attacks. After they login to their Gmail accounts, warning message,“We believe state-sponsored attackers may be attempting to compromise your account or...

CubeCart 5.0.7 and lower versions | Insecure Backup File Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

CubeCart 3.0.20 (3.0.x) and lower | Multiple SQL Injection Vulnerabilities

OVERVIEW The CubeCart 3.0.20 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 4.4.6 Cross Site Scripting

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Fastpath WebChat is vulnerable to Cross Site Scripting. 2. BACKGROUND Fastpath WebChat is part of the Fastpath product. It provides a way for users to begin chatting with support agents using Fastpath. Fastpath is a plugin of OpenFire, a real time collaboration RTC server for instant...

Joomla Beatz 1.x Cross Site Scripting

OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...

OxWall 1.1.1 <= Multiple Cross Site Scripting Vulnerabilities

OVERVIEW OxWall 1.1.1 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Oxwall is a free open source software package for building social networks, family sites and collaboration systems. It is a flexible community website engine developed with the aim to provide people...

zFTPServer - 'cwd/stat' Remote Denial of Service

!/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server version 2011-04-13 08:59' title = ' "cwd" Remote...

zFTPServer - cwdstat Remote Denial of Service

zFTPServer - cwdstat Remote Denial of Service !/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server...

zFTP Server "cwd/stat" Remote Denial-of-Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Serv...

Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities

No description provided by source. 1. OVERVIEW Joomla! 1.7.0 stable version is vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a...

Jcow CMS 4.2 Cross Site Scripting

Jcow CMS 4.2...

Elgg 1.7.10 <= | Multiple Vulnerabilities

OVERVIEW The Elgg 1.7.10 and lower versions are vulnerable to Cross Site Scripting and SQL Injection. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities and associations to create their own fully-featured...

Elgg 1.7.9 Cross Site Scripting

Elgg 1.7.9 = | Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The Elgg 1.7.9 and lower versions are vulnerable to multiple Cross Site Scripting. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities...