CVE-2015-6303

The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...

CVE-2015-6303

CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...

CVE-2015-6303: Exposure of Sensitive Information to an Unauthorized Actor

The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...

PT-2015-7167

Name of the Vulnerable Software and Affected Versions Cisco Spark application version 2015-07-04 Description The issue is related to the improper verification of X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

Cisco Spark Mobile Application Man-in-the-Middle Vulnerability

A vulnerability in the Cisco Spark mobile application could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the affected device. The vulnerability is due to improper validation of the SSL certificate used to manage the device. An attacker could exploit this...

Security Misconfiguration Vulnerability in the AWS SDK for PHP

SECURITY FIX: This release addresses a security issue associated with CVE-2015-5723, specifically, fixes improper default directory umask behavior that could potentially allow unauthorized modifications of PHP code. Thanks to @ryan-lane for the initial report. Aws\Ec2 - Added support for...

Apache Spark Cluster Arbitrary Code Execution Vulnerability

This VT has been deprecated and is therefore no longer functional. Apache Spark Cluster is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Apache Spark Cluster 1.3.x Arbitrary Code Execution

Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...

Apache Spark Cluster 1.3.x - Arbitrary Code Execution

Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x, 1.1.x, 1.2.x, 1.3.x Tested on: 1.2.1 Credits: Mayur...

Apache Spark Cluster 1.3.x - Arbitrary Code Execution

Apache Spark Cluster 1.3.x - Arbitrary Code Execution Exploit Title: Arbitary Code Execution in Apache Spark Cluster Date: 23/03/2015 Exploit Author: AkhlD AkhilDas CodeBreach.in Vendor Homepage: https://spark.apache.org/ Software Link: https://spark.apache.org/downloads.html Version: All 0.0.x,...

Apache Spark Cluster Arbitary Code Execution Exploit

Spark clusters which are not secured with proper firewall can be taken over easily Since it does not have any authentication mechanism, this exploit simply runs arbitrary codes over the cluster. All you have to do is, find a vulnerable Spark cluster usually runs on port 7077 add that host to your...

CVE-2014-5867

The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5867

CVE-2014-5867 concerns the Capital One Spark Pay Android app (com.capitalone.sparkpay) version 0.9.81, where the SSL implementation does not verify X.509 certificates. The root cause is failure to validate server certificates, which enables man-in-the-middle attackers to spoof servers and potenti...

PT-2014-6852

Name of the Vulnerable Software and Affected Versions Capital One Spark Pay application version 0.9.81 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fr...

CVE-2014-5867: Undefined Security Weakness

The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Baidu Spark Browser Denial of Service Vulnerability -01 (Aug 2014) - Windows

Baidu Spark Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Baidu Spark Browser Detection (Windows SMB Login)

Detects the installed version of Baidu Spark Browser. The script logs in via smb, searches for Baidu Spark Browser in the registry and gets the version from registry SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow DoS

Exploit for windows platform in category dos / poc...

CVE-2014-5349

Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...

Stack overflow

Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...