Apple OS X Server Web Server Unauthorized Operation Vulnerability

Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software can realize file sharing, meeting arrangement, website hosting, network remote access, etc. Web Server is one of the Web servers. A security vulnerability exists in Apple OS X Server...

Opera 12 and Opera Mail security update

Security Opera 12 and Opera Mail security update Share February 16th, 2016 We realize that those of you on old operating systems like Windows XP SP1 and older are left without much choice beyond using our Presto-based browser. With security standards on the web changing so much we didn’t want to...

rc-lubersac.com XSS vulnerability

Vulnerable URL: http://www.rc-lubersac.com//search/site/?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No Check...

USN-2696-1 openjdk-7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-2590, CVE-2015-2628, CVE-2015-4731, CVE-2015-4732,...

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

PPP 'rc_mksid()' Function Remote Buffer Overflow Vulnerability

The Point-to-Point Protocol PPP provides a standardized method for transmitting multiprotocol packets over point-to-point connections. A remote buffer overflow vulnerability exists in the PPP 'rcmksid' function due to the program failing to properly filter user-supplied data. An attacker is allow...

PT-2015-6143

Name of the Vulnerable Software and Affected Versions ppp versions 2.4.6 and earlier Description A buffer overflow issue exists in the rc mksid function, located in plugins/radius/util.c, which can be triggered when the PID for pppd exceeds 65535. This allows remote attackers to cause a denial of...

CVE-2014-9528

SQL injection vulnerability in the actionIndex function in protected/modulescore/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the from parameter to index.php. NOTE: this can be leveraged for...

Sql injection

SQL injection vulnerability in the actionIndex function in protected/modulescore/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the from parameter to index.php. NOTE: this can be leveraged for...

CVE-2014-7689

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7689

The CVE-2014-7689 entry corresponds to the Android app “The GzoneRC - The RC Hobby Hub (com.wGzoneRC)” version 0.1, where the app does not verify X.509 certificates when connecting to SSL servers. This behavior can allow a man‑in‑the‑middle attacker to spoof servers and access sensitive informati...

CVE-2014-7689

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8153

Name of the Vulnerable Software and Affected Versions com.nobexinc.wls 27892411.rc version 3.2.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...

PT-2014-8185

Name of the Vulnerable Software and Affected Versions The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application version 0.1 Description The issue is related to the application not verifying X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-7759: Undefined Security Weakness

The Jazz Lovers Radio aka com.nobexinc.wls99273254.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7689: Undefined Security Weakness

The GzoneRC - The RC Hobby Hub aka com.wGzoneRC application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7054

Summary of CVE-2014-7054 : The Android app musica de barrios sonideros (package com.nobexinc.wls_93155702.rc), version 3.3.10, does not verify X.509 certificates when connecting to SSL servers. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...

PT-2014-7976

Name of the Vulnerable Software and Affected Versions com.nobexinc.wls 96362255.rc version 3.3.10 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...