CVE-2014-7880: Undefined Security Weakness

Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors...

Depth: anatomy Samsung Galaxy KNOX remote code execution vulnerability-vulnerability warning-the black bar safety net

This article will detail the Samsung Galaxy S5 is the latest discovery of a remote execution vulnerability, an attacker can use this vulnerability to intrusion system. The current Samsung official already in the Galaxy S5, Note 4 and Alpha products to fix this vulnerability, but in S4, S4 Mini,...

CVE-2014-7770

The Lagu POP Indonesia aka com.lagu.pop.indonesia.xygwphqpuomclljvaa application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Lagu POP Indonesia aka com.lagu.pop.indonesia.xygwphqpuomclljvaa application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7770

The Lagu POP Indonesia aka com.lagu.pop.indonesia.xygwphqpuomclljvaa application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7770

The Lagu POP Indonesia aka com.lagu.pop.indonesia.xygwphqpuomclljvaa application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7770

The CVE-2014-7770 entry concerns the Lagu POP Indonesia Android app (package com.lagu.pop.indonesia.xygwphqpuomclljvaa), version 2.0, which does not verify X.509 certificates when connecting to SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive in...

CVE-2014-7770: Undefined Security Weakness

The Lagu POP Indonesia aka com.lagu.pop.indonesia.xygwphqpuomclljvaa application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

The Kindle bookstore now vulnerabilities: hackers can control the user accounts-vulnerability warning-the black bar safety net

Security researchers recently found that the Amazon website appears a loophole, hack, or be able to take the allowed to login to Amazon user account. German researcher Benjamin Daniel Moos Le Benjamin Daniel Mussler in a blog post disclosing the vulnerability. He said, for hidden in the Kindle...

Debian Security Advisory DSA 3028-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3028.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 3028-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2014 Greenbone Networks GmbH...

BulletProof FTP Client 2010 - Buffer Overflow (SEH)

!/usr/bin/python ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Exploit Date: Sep 05 2014 Vulnerability Discovery: Gabor Seljan Exploit Author: Robert Kugler Software Link: http://www.bpftp.com/ Versio...

CVE-2014-5289 - Kolibri WebServer 2.0 Vulnerable to RCE via Overly Long POST Request

Exploit Details ------------------ Senkas Kolibri WebServer 2.0 available at http://www.senkas.com/kolibri/download.php is vulnerable to RCE via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the...

BlazeDVD Pro Player 7.0 - '.plf' Local Buffer Overflow (SEH)

BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, Win 8.1 !/usr/bin/python from struct import pack buffer=...

BlazeDVD Pro 7.0 Buffer Overflow

BlazeDVD Pro v7.0 - .plf Buffer Overflow SEH Date: 19.08.2014 Exploit Author: metacom Vendor Homepage: http://www.blazevideo.com/ Software Link: http://www.blazevideo.com/download/BlazeDVDProSetup.exe Version: 7.0.0.0 Tested on: Win 7 EN, Win 8.1 !/usr/bin/python from struct import pack buffer=...

Senkas Kolibri WebServer 2.0 Buffer Overflow Exploit

Senkas Kolibri WebServer version 2.0 is vulnerable to remote code execution via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the application's binary itself, which once executed, will allow the...

Linux/x86 - Reverse TCP (127.1.1.1:1337/TCP) Shell Shellcode (74 bytes)

Linux/x86 - Reverse TCP 127.1.1.1:1337/TCP Shell Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / Title: Shell Reverse TCP Shellcode - 74 bytes Platform: Linux/x86 Date: 2014-07-25 Author: Julien Ahrens @MrTuxracer Website: http://www.rcesecurity.com Disassembly of section .text:...

Envoy: Stored XSS on sign_up page

Register using ";alert1" as the full name. As soon as you are logged in after completing the registration, you will see a pop-up. See the screenshot attached...

FuseWare FuseMail 2.7 POP Mail Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/634/info There is a buffer overflow in the FuseMail POP service long USER,PASS that may allow an intruder to execute arbitrary code on the target server. FuseMail 2.7...

Media Jukebox 8.0.400 Buffer Overflow Exploit (SEH)

No description provided by source. $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

uTorrent <= 2.0.3 DLL Hijacking Exploit (plugin_dll.dll)

No description provided by source. / Exploit Title: uTorrent = 2.0.3 DLL Hijacking Exploit plugindll.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://www.utorrent.com/downloads Version: 2.0.3 and prior Tested on: Windows 7 x86 6.1.7600 Compile and...