CVE-2014-5584

The CVE-2014-5584 entry concerns the Android app BeenVerified (com.beenverified.android) version 4.01.67, where SSL servers are not validating X.509 certificates. This allows a man-in-the-middle to spoof servers and access sensitive data via a crafted certificate. The issue is tied to the app’s T...

felici - Custom Background Shell Upload

The felici WordPress theme was affected by a Custom Background Shell Upload security vulnerability...

dagda - Custom Background Shell Upload

The dagda WordPress theme was affected by a Custom Background Shell Upload security vulnerability...

appius - Custom Background Shell Upload

The appius WordPress theme was affected by a Custom Background Shell Upload security vulnerability...

Shotzz - Custom Background Shell Upload

The shotzz WordPress theme was affected by a Custom Background Shell Upload security vulnerability...

background-music 1.0 - jPlayer.swf XSS

The background-music WordPress plugin was affected by a jPlayer.swf XSS security vulnerability...

[SECURITY] Fedora 20 Update: cinnamon-control-center-2.2.10-1.fc20.1

This package contains configuration utilities for the Cinnamon desktop, whi ch allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

[SECURITY] Fedora 20 Update: control-center-3.10.3-2.fc20

This package contains configuration utilities for the GNOME desktop, which allow to configure accessibility options, desktop fonts, keyboard and mouse properties, sound setup, desktop theme and background, user interface properties, screen resolution, and other settings...

Opera Web Browser 9 CSS Background URI Memory Corruption Vulnerability

source: http://www.securityfocus.com/bid/19166/info Opera Web Browser is prone to a memory-corruption vulnerability. A remote attacker may trigger this issue by enticing a user to visit a malicious website. This issue has been reported in Opera 9. Other versions may be vulnerable as well. This BI...

SiteServer 3.6.4 /siteserver/cms/background_nodeGroup.aspx SQL注入漏洞

No description provided by source...

CVE-2014-3132

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

Code injection

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

CVE-2014-3132

CVE-2014-3132 affects SAP Solution Manager 7.1 through SAP Background Processing. The issue is improper access restriction that allows remote authenticated users to disclose sensitive information via an unspecified RFC function. Impact is information disclosure with a CVSS v2 base score of 4.0 (M...

CVE-2014-3132

SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1...

yungoucms system latest SQL injection-vulnerability warning-the black bar safety net

Official website : http://www.yungoucms.com/ demo site: http://www.yungoucms.cn/ Product search you can build a SQL statement that is! http://www.yungoucms.cn/?/stag/ publicfunction tag $search =$this-segment4; if!$ searchmessage"enter search keyword"; $search = urldecode$search; $search =...

WordPress Vithy / Appius / Dagda / Vector / Shotzz Shell Upload

Exploit Title : WordPress Custom Background Shell Upload Google Dork : inurl:"/wp-content/plugins/custom-background/" Date : 23-03-2014 Exploit Author : CaFc Versace Tested on : Windows 7 Contact : [email protected], [email protected] Prooft:...

WordPress Felici / Custom Background Shell Upload

Exploit Title : WordPress Felici Shell Upload Google Dork : inurl:"/wp-content/themes/felici/" Date : 23-03-2014 Exploit Author : CaFc Versace Vendor Homepage : http://wordpressnull.com/themeforest-felici-v1-7-wordpress-magazine-theme/ Tested on : Windows 7 Contact : [email protected],...

iOS 7 Bug Could Allow Background Monitoring

It’s only been a few days since Apple fixed the nasty certificate-validation “goto fail” vulnerability in iOS and OSX and now word comes that another bug, one that could allow an attacker to monitor keystrokes on iOS 7 devices without the user being any the wiser, also exists. The problem...

SiteServer 3.6.4 /siteserver/cms/background_channelsGroup.aspx SQL注入漏洞

No description provided by source...

ECSHOP background low-privileged sql injection-vulnerability warning-the black bar safety net

Brief description: ECSHOP background low permissionssql injectionone Detailed description: General Delivery clerk in the landing after just need a list of orders of permission, which is a low administrator can be injected to give the super pipe permissions As with file permissions, you can also...