314 matches found
CVE-2014-7462
The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Session fixation
The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7462
The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7462
CVE-2014-7462 affects the Android app “The Fashion Story: Neon 90’s” (package com.teamlava.fashionstory39), version 1.5.6.5. The root cause is failure to verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...
CVE-2014-7462: Undefined Security Weakness
The Fashion Story: Neon 90's aka com.teamlava.fashionstory39 application 1.5.6.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6758
The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6758
The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6758
The CVE-2014-6758 entry concerns The Qin Story Android app (1.00) that does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attacks to spoof servers and obtain sensitive information. The root cause is missing certificate validation in SSL/TLS; impact is partial confiden...
PT-2014-7436
Name of the Vulnerable Software and Affected Versions The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp version 1.00 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...
CVE-2014-6758: Undefined Security Weakness
The Qin Story aka com.kongzhong.tjmammoth.android.cqqslengp application 1.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5831
The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5831
The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5831
CVE-2014-5831 concerns the Android app “The Hotel Story: Resort Simulation” (com.happylabs.hotelstory) version 1.7.9B. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information ...
PT-2014-6816
Name of the Vulnerable Software and Affected Versions The Hotel Story: Resort Simulation aka com.happylabs.hotelstory version 1.7.9B Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does no...
CVE-2014-5831: Undefined Security Weakness
The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5184: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the story parameter in an edit action to wp-admin/admin.php...
PT-2014-6323
Name of the Vulnerable Software and Affected Versions stripShow plugin version 2.5.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting the story parameter in an edit action to the "wp-admin/admin.php" endpoint...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...