2018 matches found
Information disclosure
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5615
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5615
CVE-2014-5615 affects the Snap Secure app (com.exclaim.snapsecure.app) version 9.5 for Android, where SSL/TLS certificate verification is not performed. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability details ar...
PT-2014-6600
Name of the Vulnerable Software and Affected Versions Snap Secure aka com.exclaim.snapsecure.app version 9.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...
CVE-2014-5615: Undefined Security Weakness
The Snap Secure aka com.exclaim.snapsecure.app application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
IBM AIX <= 4.2.1 snap Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you...
UBUNTU-CVE-2014-4040
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...
CVE-2014-4040: Undefined Security Weakness
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a...
PT-2014-5690
Name of the Vulnerable Software and Affected Versions powerpc-utils version 1.2.20 Description The issue allows remote attackers to obtain sensitive information by leveraging access to a technical-support data stream, as the snap function in powerpc-utils produces an archive with fstab and...
CVE-2013-4299
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
CVE-2013-4299
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
CVE-2013-4299: Exposure of Sensitive Information to an Unauthorized Actor
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
kernel: dm: dm-snapshot data leak
Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device...
PEStudio 3.69 - Denial of Service
Exploit for windows platform in category remote exploits Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on:...
Site Go - multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Site Go - multiple Vulnerabilities D0rk: allintitle: "بوابة التدوين" Date: 12.mar.29 Author: L3b-r1'z Email Me : email protected \ email protected Security : Low Xss Vuln : in search b0x , you can put alert"Sec3ever" And you wil...
Multiple Snap Appliance (SnapServer) Bypass Vulnerabilities
Exploit Title: Multiple Snap Appliance SnapServer Vulnerabilities Date: 13-02-2011 Author: SeeMe Vendor Link: http://www.overlandstorage.com/ Effected Versions: N/A Multiple SnapAppliance SnapServer suffers from Multi-vulnerabilities which allows unprivileged users to view and modify Storage-Data...
HyperStrike Integration With Snap Fitness SSO Bypass
HyperStrike Integration with Snap Fitness, SSO Bypass Vulnerability Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability existed within the single sign-on SSO integration of HyperStrike and Snap Fitness websites. By altering the defined...
Google Chrome 4.1.249.1064 - Remote Memory Corrupt
Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Save this script...
Google Chrome v4.0.249 XML Denial of Service PoC
Exploit for windows platform in category dos / poc ================================================ Google Chrome v4.0.249 XML Denial of Service PoC ================================================ Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link:...
CVE-2009-4607
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...