CVE-2014-7441

CVE-2014-7441 affects the Pakan Ken Tube (com.PakanKen) Android app version 0.1. The app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information through a crafted certificate. The NVD entry reports a CVSS v2 base ...

CVE-2014-7441

The Pakan Ken Tube aka com.PakanKen application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Tube Ace(Adult PHP Tube Script) SQL Injection

No description provided by source...

Get Tube All Versions SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------- Get Tube 4.51 & All Versions SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Get Tube 4.51 & Al...

Videos Tube 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source...

CVE-2014-3962

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

Sql injection

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

CVE-2014-3962

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

CVE-2014-3962

CVE-2014-3962 affects Videos Tube 1.0, with SQL injection vulnerabilities in two PHP scripts (videocat.php and single.php). The root cause is improper handling of URL parameters, enabling remote attackers to construct arbitrary SQL commands. The vulnerability permits attacks without user authenti...

Videos Tube 1.0 - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Videos Tube SQL Injection and Remote Code Execution Google Dork: inurl:"single.php?url=" video Date: 05.05.2014 Exploit Author: Mustafa ALTINKAYNAK Vendor Homepage: http://www.phpscriptlerim.com Software Link:...

Videos Tube 1.0 SQL Injection

| Exploit Title: Videos Tube SQL Injection and Remote Code Execution| | Google Dork: inurl:"single.php?url=" video| | Date: 05.05.2014| | Exploit Author: Mustafa ALTINKAYNAK| | Vendor Homepage: http://www.phpscriptlerim.com| | Software Link: http://demo.phpscriptlerim.com/free/videostube/| |...

Videos Tube 1.0 - Multiple SQL Injections

Videos Tube 1.0 - Multiple SQL Injections Exploit Title: Videos Tube SQL Injection and Remote Code Execution Google Dork: inurl:"single.php?url=" video Date: 05.05.2014 Exploit Author: Mustafa ALTINKAYNAK Vendor Homepage: http://www.phpscriptlerim.com Software Link:...

Videos Tube 1.0 - Multiple SQL Injections

Exploit Title: Videos Tube SQL Injection and Remote Code Execution Google Dork: inurl:"single.php?url=" video Date: 05.05.2014 Exploit Author: Mustafa ALTINKAYNAK Vendor Homepage: http://www.phpscriptlerim.com Software Link: http://demo.phpscriptlerim.com/free/videostube/ Version: 1.0 Description...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

Tube Ace - q Cross-Site Scripting

Tube Ace - q Cross-Site Scripting source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Tube Ace - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Tube Ace Cross Site Scripting

Exploit Title: Tube AceAdult PHP Tube Script XSS Vulnerability Date: 15/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan...

CVE-2012-1029

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-1029

CVE-2012-1029 refers to a SQL injection vulnerability in Tube Ace (Adult PHP Tube Script) 1.6, specifically in mobile/search/index.php via the q parameter. The root cause is an SQL injection that could allow remote attackers to execute arbitrary SQL commands. Affected component: the q parameter i...