1191 matches found
CVE-2016-1323
The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...
Cisco Spark Representational State Transfer Interface Information Disclosure Vulnerability
A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an authenticated, remote attacker to view sensitive information from the underlying operating system. The vulnerability is due to insufficient protections of sensitive data. An attacker could exploit...
Cisco Spark Representational State Transfer Interface Denial of Service Vulnerability
A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to missing authorization checks on certain administrative pages. An...
Cisco Spark Representational State Transfer Interface Unauthorized Access Vulnerability
A vulnerability in the Representational State Transfer REST interface of Cisco Spark could allow an unauthenticated, remote attacker to make changes to an affected system system. The vulnerability is due to improper implementation of authorization controls when accessing certain web pages of the...
Cisco Spark Certificate Validation Information Disclosure Vulnerability
Cisco Spark is a collaboration services solution. Cisco Spark suffers from a security vulnerability where the program fails to properly validate X.509 certificates on the server side of SSL, allowing a remote attacker to perform a man-in-the-middle attack using specially crafted certificates to...
Design/Logic Flaw
The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...
CVE-2015-6303
The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...
CVE-2015-6303
The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...
CVE-2015-6303
CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...
Cisco Spark Mobile Application Man-in-the-Middle Vulnerability
A vulnerability in the Cisco Spark mobile application could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the affected device. The vulnerability is due to improper validation of the SSL certificate used to manage the device. An attacker could exploit this...
Security Misconfiguration Vulnerability in the AWS SDK for PHP
SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. Aws\Ec2 - Added support for...
Apache Spark Cluster Arbitrary Code Execution Vulnerability
This VT has been deprecated and is therefore no longer functional. Apache Spark Cluster is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Apache Spark Cluster 1.3.x Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Apache Spark Cluster 1.3.x - Arbitrary Code Execution Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x,...
Apache Spark Cluster 1.3.x - Arbitrary Code Execution
Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...
Apache Spark Cluster Arbitary Code Execution Exploit
Spark clusters which are not secured with proper firewall can be taken over easily Since it does not have any authentication mechanism, this exploit simply runs arbitrary codes over the cluster. All you have to do is, find a vulnerable Spark cluster usually runs on port 7077 add that host to your...
CVE-2014-5867
The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5867
CVE-2014-5867 concerns the Capital One Spark Pay Android app (com.capitalone.sparkpay) version 0.9.81, where the SSL implementation does not verify X.509 certificates. The root cause is failure to validate server certificates, which enables man-in-the-middle attackers to spoof servers and potenti...
Baidu Spark Browser Denial of Service Vulnerability -01 (Aug 2014) - Windows
Baidu Spark Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...