Design/Logic Flaw

The Alien War Survivors aka com.ly.a13.gp application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6942

Name of the Vulnerable Software and Affected Versions The Alien War Survivors aka com.ly.a13.gp application version 1.3.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5957: Undefined Security Weakness

The Alien War Survivors aka com.ly.a13.gp application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5913

The Allies in War aka com.gamelion.aiw application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Allies in War aka com.gamelion.aiw application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5913

The CVE-2014-5913 entry concerns The Allies in War (aka com.gamelion.aiw) Android app 1.3.2 failing to verify SSL server X.509 certificates, enabling MITM attackers to spoof servers and obtain sensitive data. Affected component: Android app networking/SSL validation; root cause: lack of certifica...

PT-2014-6898

Name of the Vulnerable Software and Affected Versions The Allies in War aka com.gamelion.aiw version 1.3.2 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5913: Undefined Security Weakness

The Allies in War aka com.gamelion.aiw application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

JBoss JMX Console Beanshell Deployer WAR Upload and Deployment

This module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment method. This module requires Metasploit: https://metasploit.com/download Current...

Apache Tomcat Manager Application Deployer Authenticated Code Execution

No description provided by source. $Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

JBoss Java Class DeploymentFileRepository WAR deployment

No description provided by source. $Id: jbossdeploymentfilerepository.rb 9950 2010-08-03 15:14:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

Clever's Games Terminator 3: War of the Machines 1.16 Server Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13776/info Terminator 3 : War of the Machines server is prone to a buffer overflow vulnerability that may permit remote attackers to execute arbitrary code on a vulnerable system, this may facilitate unauthorized access...

jarle aase war ftpd 1.67 b04 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclose an arbitrary...

Powered by iNetScripts: Shell Upload Vulnerability

No description provided by source. ==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploi...

Liquid War 5.4.5/5.5.6 HOME Environment Variable Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of sufficient boundary checks performed on...

Novell ZENworks Asset Management Remote Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

War FTP Daemon 1.8 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon 1.82.00-RC9 is...

Alwjeez Script Database Backup Exploit

No description provided by source. ::::::::::::::::Exploit::::::::::: html center body text=00FF00 bgcolor=000000 p align=centerbspan lang=en-usSecurity war /span/b/p p align=centerbspan lang=en-usFor more exploits/span/b/p p align=centerspan lang=en-usbvisit/b /span/p p align=centerfont...

Jgaa WarFTPd 1.66 x4s/1.67 -3 CWD/MKD DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the...

Medieval Total War 1.0/1.1 nickname Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0 Unicode characters to the...