CVE-2014-4888

The BattleFriends at Sea GOLD aka com.tequilamobile.warshipslivegold application 1.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4888

The CVE-2014-4888 entry concerns the Android app BattleFriends at Sea GOLD (package com.tequilamobile.warshipslivegold) version 1.1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive ...

[SECURITY] Fedora 19 Update: mksh-50c-1.fc19

mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...

AT&T Hit By Insider Breach

AT&T is warning consumers about a data breach involving an insider who illegally accessed the personal information of an unspecified number of users. The compromised data includes Social Security numbers and driver’s license numbers. In a letter sent to the Vermont attorney general, AT&T official...

PYSEC-2014-43

atdownload.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs Files and Images stored on custom content types via a crafted URL...

ATANDTWEBMAIL Cloud Service Detection

Binary data 8423.prm...

openstack-keystone: token expiration date stored incorrectly

A flaw was found in keystone revocation events that resulted in the "issuedat" time being updated when a token created by the V2 API was processed by the V3 API. This could allow a user to evade token revocation. Only OpenStack Identity setups configured to make use of revocation events and UUID...

PYSEC-2014-108

The V3 API in OpenStack Identity Keystone 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issuedat value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification 1 GET or 2 HEAD request to v3/auth/tokens/...

Open Web Analytics 1.5.7 Cross Site Scripting / Remote File Inclusion

Exploit Title : Open Web Analytics - v: 1.5.7 multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://www.openwebanalytics.com/ Download Link : http://downloads.openwebanalytics.com/ Google Dork : "powered by Open Web Analytics" Date : 14/07/2014 Discovered at : IHT Lab 1ND14N...

FoeCMS Multiple Vulnerabilities

FoeCMS suffers from cross site scripting, open redirect, and remote SQL injection vulnerabilities. Exploit Title : FoeCMS multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://foecms.com/ Download Link : https://github.com/themarioga/FoeCMS/archive/master.zip Date : 05/07/2014...

Motorola Bluetooth Interface Dialog Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17190/info Motorola mobile handsets are prone to a dialog-spoofing vulnerability when accepting Bluetooth communications. An attacker could exploit this issue to trick a user into granting them AT access to the device. Th...

Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access Device: The AT-MCF2000M is t...

AT-TFTP Server 2.0 - Stack Based Buffer Overflow DoS

No description provided by source. Exploit Title: AT-TFTP 2.0 long filename stack based buffer overflow - DOS Date: 12.04.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.alliedtelesis.com/ Software Link:...

AT Computing atsar_linux 1.4 File Manipulation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via...

Allied Telesyn TFTP Server 1.9 - Long Filename Overflow

No description provided by source. $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft Print Spooler Service Impersonation Vulnerability

No description provided by source. $Id: ms10061spoolss.rb 11766 2011-02-17 19:22:11Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

NetBSD <= 1.3.2,SGI IRIX <= 6.5.1 at(1) Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/331/info A vulnerability exists in NetBSD version 1.3.2 and lower, and Silicon Graphics Inc's IRIX versions 6.2, 6.3, 6.4, 6.5 and 6.5.1. The at1 program can be supplied with a -f flag, and an error is access validation c...

WinVNC Web Server <= 3.3.3r7 - GET Overflow

No description provided by source. $Id: winvnchttpget.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/python SUMMARY: AT-TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP. http://www.alliedtelesyn.co.uk/en-gb/support/downloads/tools.asp It provides an implementation of the TFTPv2 protocol. A vulnerability has been identified in TFTP Server...

AT Contenator <= 1.0 - (Root_To_Script) Remote File Include Exploit

html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleAT Contenator = v1.0 RootToScript Remote File Include Exploit/title script language=JavaScript //'=============================================================================================== //'Script Name: AT...