3701 matches found
Nextcloud: Expired SSL certificate
I would like to inform you that the SSL certificate for www.nextcloud.org is expired at: 24. August 2016 15:03 Thanks...
Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net
! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...
How to renew or request an SSL Certificate in Citrix Endpoint Management (XenMobile) Server
This article describes how to request or renew an SSL certificatefor Citrix Endpoint Management XenMobile Server...
How to Export and Install an SSL Certificate for StoreFront to Use HTTPS
This article explains how to export your existing SSL certificate, import the certificate to another StoreFront server, bind the certificate to Internet Information Services IIS, and configure StoreFront for HTTPS connections. This article assumes the following typical scenarios: You have created...
Coordinate Plus App fails to verify SSL server certificates
Overview Coordinate Plus App provided by Toshiba Corporation fails to verify SSL server certificates. Gaku Taniguchi of RiskFinder,inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle...
Intel CrossWalk project does not validate SSL certificates after first acceptance
Overview The Intel Crosswalk project is a framework for developing hybrid apps for Android and iOS. The Crosswalk project does not properly handle SSL certificate validation when a user accepts an invalid certificate, preventing the app for validating any future SSL certificates. Description...
JVN#68364327: WAONサービスアプリ App for Android fails to verify SSL server certificates
WAONサービスアプリ App for Android provided by AEON CO., LTD. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by...
Едадил — акции в магазинах - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Едадил — акции в магазинах published at the 'play' market has multiple vulnerabilities...
Ian Dunn: SSL certificate public key less than 2048 bit
One of the SSL certificates used by your SSL server On your personal website: https://iandunn.name/ contains a public key less than 2048 bit long. New Standard for SSL Certificates Industry standards set by the Certification Authority/Browser CA/B Forum require that certificates issued after...
Free SSL tools have vulnerabilities hackers can get any domain name of the SSL certificate-vulnerability warning-the black bar safety net
! 0 0 0 0 The Dutch security companyCompuTestsecurity researcherThijs Alkemadein Israel the companyStarCom, poweredcreate publish freeSSLcertificate toolStartEncryptfound in a number of design and implementation defects. StarCom, powered by the Let's Encrypt project, inspired, in 6 on 4, launch...
Troubleshooting Checklist: In Secure Mail, a "Cannot authenticate to the server <FQDN> because the certificate is not valid” error appears
Do the following: Ensure that the certificate chain is valid and that the configuration is complete on the Exchange Server. Try to connect the native email client with the same Exchange Server. If it works as expected, the issue is with client certificate configuration on the XenMobile server Onl...
JVN#39594409: DMM Movie Player App fails to verify SSL server certificates
DMM Movie Player App provided by DMM.com Labo Co.,Ltd. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by...
Uber: faspex.uber.com uses an invalid SSL certificate
The SSL certificate deployed on faspex.uber.com was originally issued for faspex.ubersp.com. This means the certificate is invalid for that domain and when loaded will display an error in the user's browser. Since this is an uber internal page, uber employees are most likely getting used to...
Design/Logic Flaw
The Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates, which allows local users to have unspecified impact via unknown vectors, aka HWPSIRT-2016-03008...
CVE-2016-3677
Huawei Wear App for Android is affected (versions before 15.0.0.307) by CVE-2016-3677 due to lack of SSL certificate validation. This allows local users to cause unspecified impact via unknown vectors. Remediation per Huawei advisory is to update to a fixed version (15.0.0.307 or later); exploita...
XSS Hunter is Now Open Source – Here’s How to Set It Up!
Recently I opened up XSS Hunter for public registration, this was after publishing a post on how I used XSS Hunter to hack GoDaddy via blind XSS and pointed out that many penetration testers use a very limited alert box-based pentesting methodology which will not detect these types of issues. Aft...
Jetstar Airways Jetstar App for iOS Man-in-the-Middle Attack Vulnerability
Jetstar Airways Jetstar App for iOS is a suite of iOS-based applications from Jetstar Airways Australia that provide air ticket search, booking and other functions. A man-in-the-middle attack vulnerability exists in Jetstar Airways Jetstar App for iOS versions prior to 3.0.0, which originates fro...
MariaDB Server 5.5.x < 5.5.47 / 10.0.x < 10.0.23 / 10.1.x < 10.1.10 Multiple Vulnerabilities
Binary data 9287.prm...
Open-Xchange: nginx server vulnerable
1 Vulnerability: Clickjacking Vulnerable Domain: lists.dovecot.fi Vulnerable URL: http://lists.dovecot.fi/?C=N;O=D%3Cscript%3Ealert%22Thalaivarsubu%22%3C/script%3E Browser version: Google Chrome 50.0.2661.94 Operating system: Windows 7 Steps to Reproduce: iframe width: 800px; height: 500px;...
SUSE-SU-2016:1195-1 Security update for python-tornado
The python-tornado module was updated to version 4.2.1, which brings several fixes, enhancements and new features. The following security issues have been fixed: - A path traversal vulnerability in StaticFileHandler, in which files whose names started with the staticpath directory but were not...