WordPress Digital Zoom Studio Plugin - XSS

Multiple cross-site scripting XSS vulnerabilities are in deploy/designer/preview.php. Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "swfloc" or "designrand" parameter. Solution Update the plugin...

DJ Studio Pro 5.1 .pls 缓冲区溢出漏洞

No description provided by source...

Cytel Studio 9.0 (CY3 File) 缓冲区溢出漏洞

No description provided by source...

Oracle Endeca Information Discovery Studio Multiple Vulnerabilities (October 2014 CPU)

The remote host is running a version of Oracle Endeca Information Discovery Studio that may be missing a vendor-supplied security patch that fixes multiple bugs and OpenSSL related security vulnerabilities. Note that depending on how the remote host is configured, Nessus may not be able to detect...

CVE-2014-6831

The Hippo Studio aka com.appgreen.hippostudio application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Hippo Studio aka com.appgreen.hippostudio application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6831

The CVE-2014-6831 issue affects the Hippo Studio Android app (com.appgreen.hippostudio) 1.0, where SSL/TLS certificate verification is not performed when connecting to HTTPS servers. This weakens trust in server identity and allows MITM attackers to spoof servers and access sensitive information ...

CVE-2014-6831

The Hippo Studio aka com.appgreen.hippostudio application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Provide the right artifact: Windows NT EPATHOBJ Local Ring0 Exploit-vulnerability warning-the black bar safety net

This is a 2 0 1 3 year 6 month released the windows nt kernel local mention of the right to 0day Vulnerability CVE-2 0 1 3-3 6 6 0, but soon Microsoft will in the 2 0 1 3 year 7 month The Update Patch fixes this vulnerability; this vulnerability relates to the version of windows there is XP, Vist...

CVE-2014-5933

The Coke Studio 7 aka com.cokeshare.pakistan application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Coke Studio 7 aka com.cokeshare.pakistan application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5933

CVE-2014-5933 affects the Coke Studio 7 Android app (package com.cokeshare.pakistan) version 1. The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. No remediation det...

CVE-2014-5933

The Coke Studio 7 aka com.cokeshare.pakistan application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5674

CVE-2014-5674 affects the PicsArt Photo Studio Android app (com.picsart.studio), up to version 4.5.5, by not validating SSL certificates. The vulnerability enables MITM attackers to spoof servers and access sensitive data. Public sources describe the root cause as improper certificate validation,...

CVE-2014-5674

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress

Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

CVE-2014-4647

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors...

Stack overflow

Stack-based buffer overflow in the loadExtensionFactory method in the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-4647

The CVE concerns the TSVisualization ActiveX control in Embarcadero ER/Studio Data Architect. A stack-based buffer overflow in the loadExtensionFactory method allows an attacker to execute arbitrary code on vulnerable installations. The explicit root cause is failure to validate the size of input...