Information disclosure

The TH3 professional Al Mohtarif aka com.th3professional.almohtarif application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6948

CVE-2014-6948 affects the Android app “TH3 professional Al Mohtarif” (com.th3professional.almohtarif) version 1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and read sensitive information via a crafted cert...

CVE-2014-6948

The TH3 professional Al Mohtarif aka com.th3professional.almohtarif application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6744

The Al-Ahsa News aka com.alahsa.news application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Al-Ahsa News aka com.alahsa.news application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6744

CVE-2014-6744 affects the Android app “Al-Ahsa News” (com.alahsa.news) 2.0. The issue is that it does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents confirm t...

CVE-2014-6744

The Al-Ahsa News aka com.alahsa.news application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Filezilla FTP Server <= 0.9.21 (LIST/NLST) Denial of Service Exploit

No description provided by source. ?php Filezilla FTP Server 0.9.20 beta / 0.9.21 LIST, NLST and NLST -al Denial Of Service by shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org special thanks to rgod for his first advisory about STOR Denial of service, see:...

AL-Athkat.2.0 - Cross Site Scripting Vulnerability

No description provided by source...

TlAds 1.0 - Remote Insecure Cookie Handling Vulnerability

No description provided by source. TlAds v 1 = Insecure Cookie Handling Found By : x0r - Evolution Team Download: http://www.easy-script.com/scripts-dl/tlads-1.zip Exploit: javascript:document.cookie = tlAdslogin=admin; path=/ Stupid Admin ! P0wned :P Grazie Al Mio Amore...Ti Amo Da Morire...

Traidnt UP 2.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/ruby ============================================= Traidnt UP v2.0 Exploit SQL Injection Vulnerability --------------------------------------------- Date: 05-08-2009 Discovered & written by: Jafer Al-Zidjali Email: jaferatscorpionds.com Website:...

CREAR ALMail32 1.10 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/574/info The ALMail32 POP3 client conatins unchecked buffers in the header parsing code. An abnormally long FROM: or TO: field in the header of an incoming email will overwrite the buffer and allow arbitrary code to be...

PHPIDS 0.4 - Remote File Inclusion Vulnerability

No description provided by source. PHPIDS 0.4 - Remote File Inclusion Vulnerability @package PHPIDS @Version 0.4 @license http://www.gnu.org/licenses/lgpl.html LGP @link http://php-ids.org/ Type : Remote File Inclusion Vulnerability Author: eidelweiss Date : 2010-02-08 Location: Indonesia...

RASPcalendar 1.01 - [ASP] Admin Login Vlunerabilities

No description provided by source. --------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...

PEAR 1.9.0 - Multiple Remote File Inclusion Vulnerability

No description provided by source. PEAR v.1.9.0 Multiple Remote File Inclusion Vulnerability PEAR, the PHP Extension and Application Repository @package PEAR @Version v.1.9.0 @license http://opensource.org/licenses/bsd-license.php New BSD License @link http://pear.php.net/package/PEAR Type : Remo...

Al Qaeda Homegrown Encryption Likely Aids NSA Intelligence

Terrorist organization Al Qaeda has reportedly stepped up its development of homegrown encryption technology since the Edward Snowden leaks began last June. The question puzzling some security experts is: Why? “This is hard, and the odds they are doing it correctly are low,” said cryptographer an...

Terrorist Group Al-Qaeda Uses New Encryption Softwares After NSA Revelations

Last year, Just after Snowden leaks, the U.S Government warned that NSA surveillance revelations will make harder to track bad guys trying to harm the United States, as disclosures can be helpful to terrorist groups. In response to the NSA revelations, the terrorists at Al-Qaeda have started usin...

CNN's Twitter, Facebook and website hacked by Syrian Electronic Army

A well-known pro-Syrian hacker group known as Syrian Electronic Army SEA, aligned with President Bashar al-Assad, who successfully attacked The New York Times, Huffington Post, and Twitter, BBC, National Public Radio, Al-Jazeera, Microsoft, Xbox, Skype and responsible for cyber-attacks against...

TIME Magazine Twitter account hacked by Syrian Electronic Army

Just now, The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the TIME Magazine. The Hacker group tweeted from the TIME's official account, "Syrian Electronic Army Was Here via @OfficialSEA16..Next time write a better word about the Syrian president SEA" with...

RASPcalendar 1.01 SQL Injection

--------------------------------------------------- RASPcalendar 1.01 ASP Admin Login Vlunerabilities --------------------------------------------------- Author : Hackeri-AL Date : 06-11-2013 Vendor Homepage : http://www.rttucson.com/files.html Software link :...