4922 matches found
Information disclosure
The Ultimate Christian Radios aka com.ngg.ultimatechristianradios application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7716
CVE-2014-7716 affects the Android app “The Ultimate Christian Radios” (package com.ngg.ultimatechristianradios) version 1.0.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a cra...
CVE-2014-7716: Undefined Security Weakness
The Ultimate Christian Radios aka com.ngg.ultimatechristianradios application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6737
The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6737
The CVE-2014-6737 entry concerns the Android app “The Ultimate Target-Armored Sniper” (aka air.wood.liame.ultimatetarget), version 1.0.1. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and exfiltrate se...
CVE-2014-6737: Undefined Security Weakness
The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
TinyMCE 3.5 - swfupload Cross-Site Scripting
The Ultimate TinyMCE WordPress plugin was affected by a swfupload Cross-Site Scripting security vulnerability...
WP Ultimate Email Marketer - Multiple Vulnerabilities
The wp-ultimate-email-marketer WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)
The Ultimate WordPress Auction Plugin WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
百度浏览器海外版（Spark Browser） v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)
Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Desc: Spark Browser version...
CVE-2014-4600
Multiple cross-site scripting XSS vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 listname or 2 contact parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 listname or 2 contact parameter...
CVE-2014-4600
Summary: The WP Ultimate Email Marketer WordPress plugin (
CVE-2014-4600: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 listname or 2 contact parameter...
Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC
No description provided by source. import socket, sys print \n print ---------------------------------------------------------------- print | Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC | print | Matthew Bergin, Bergin Penetration Testing | print | Win7 Ultimate v6.1 build 7600, IIS...
MP3Info 0.8.5a - SEH Buffer Overflow Exploit
No description provided by source. Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy aymansagy at gmail.com Vendor Homepage: http://ibiblio.org/mp3info/ Software Link:...
pGB 2.12 kommentar.php SQL Injection Vulnerability
No description provided by source. Exploit Title: pGB 2.12 SQL Injection Vulnerability Date: 18/01/2012 - 03.52 Author: 3spi0n Software Website: http://www.powie.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: kommentar.php $ Demo Sites:...
Ultimate eShop Error Based SQL Injection Vulnerability
No description provided by source. Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability Google Dork: inurl:index.cgi?aktion=shopview Date: 19/04/2011 Author: Romka Software Link: http://www.ultimate-eshop.de/ Tested on: Windows XP SP3 Exploit:...
Mnews <= 1.1 (view.php) SQL Injection
No description provided by source. ??php / Exploit Title: Mnews = 1.1 SQL Injection Google Dork: inurl:mnews/view.php Google Dork: intitle:Mnews sistena de news Date: 03rd 06 2012 Software Link: http://phpbrasil.com/script/eo4aWVVzFd/mnews-sistema-de-noticias Version: 1.1 Tested on: Debian...
Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
No description provided by source. / Exploit Title: Skype = 4.2.0.169 DLL Hijacking Exploit wab32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Skype v4.2.0.169 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .skype Greetz: Astalavista,...