CVE-2014-5962

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5962

The CVE-2014-5962 entry concerns the Android app Guess The Actor (com.gamelikeinc.actors) version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

PT-2014-6947

Name of the Vulnerable Software and Affected Versions The Guess The Actor aka com.gamelikeinc.actors application version 1.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-5962: Undefined Security Weakness

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Pen Testing Using Live Malware Becoming a Must

BERLIN–Penetration testing has come a long way in the last decade, evolving from a somewhat controversial practice to a de facto best practice in the enterprise market. That evolution hasn’t stopped by any means, and one of the things that experts say must be a part of any comprehensive test now ...

Web page security vulnerability detection - hidden field-vulnerability warning-the black bar safety net

Some poorly designed web site system may contain a lot of may be the use of security vulnerabilities, these security vulnerabilities as giving the remote attacker to open a backdoor, so an attacker can easily perform some malicious attack. For example, the Common Vulnerabilities and Exposures...

The rise of the chaotic actor

The past year saw the emergence of a series of cleverly named hacking groups like Anonymous, LulzSec, and TeaMp0isoN. In 2011, these groups brought the fight to corporate America, crippling firms both small HBGary Federal and large Sony. As the year drew to a close these groups noticeably shifted...

Hrithikrules.com Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: www.hrithikrules.com XSS vulnerability Date: 12/12/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : ©2010 HrithikRules.com site info : Hrithikrules is the...

Official Website of Will Smith's Daughter Willow Smith Hacked

Official Website of Will Smith's Daughter Willow Smith Hacked Today a Hacker with name BLaCk SPECTRE hack and Deface the Official Website of Willow Smith .Willow is the daughter of musician-actor Will Smith and actress Jada Pinkett Smith. May be this attack is just for fun, as no message is poste...

CVE-2003-1188: Undefined Security Weakness

Unichat allows remote attackers to cause a denial of service crash by adding extra chat characters avatars and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit...

CVE-1999-0372: Exposure of Sensitive Information to an Unauthorized Actor

The installer for BackOffice Server includes account names and passwords in a setup file reboot.ini which is not deleted...