Lucene search
+L

3456 matches found

NVD
NVD
added 2014/09/18 10:55 a.m.22 views

CVE-2014-4352

Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

2.1CVSS5AI score0.00231EPSS
SaveExploits0References6
Prion
Prion
added 2014/09/18 10:55 a.m.24 views

Information disclosure

Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

2.1CVSS5.4AI score0.00231EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2014/09/18 10:00 a.m.37 views

CVE-2014-4352

Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

5AI score0.00231EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2014/09/18 12:00 a.m.46 views

Apple iOS < 8 Multiple Vulnerabilities

Binary data appleios80check.nbin...

9.3CVSS7.3AI score0.49049EPSS
SaveExploits14References59
ATTACKERKB
ATTACKERKB
added 2014/09/17 2:55 p.m.4 views

CVE-2012-1417

Multiple cross-site scripting XSS vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com...

3.5CVSS5.4AI score0.01733EPSS
SaveExploits7References8
Cvelist
Cvelist
added 2014/09/09 1:00 a.m.23 views

CVE-2014-5602

The Magzter -Magazine & Book Store aka com.dci.magzter application 3.31 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/09 1:00 a.m.42 views

CVE-2014-5602

The CVE-2014-5602 entry applies to the Magzter - Magazine & Book Store Android app (package com.dci.magzter), version 3.31, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The linked...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.25 views

Microsoft Windows NT 4.0 PhoneBook Server Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/2048/info The Phone Book Service is an optional component that ships with the NT 4 Option Pack and Windows 2000. It is not installed by default. A buffer overflow vulnerability was discovered in the URL processing routine...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.26 views

PHP-Nuke Book Catalog Module 1.0 'upload.php' Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system;...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.48 views

mambo component nfnaddressbook 0.4 - Remote File Inclusion Vulnerability

No description provided by source. MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

WoltLab Burning Book <= 1.1.2 - Remote SQL Injection

No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; dieuse ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n if !$ARGV0;$ARGV1='' i...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

E-Guest 1.1 Server Side Include Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5129/info E-Guest guest book is a freely available, open source guest book. It is designed for Unix and Linux operating systems. E-Guest does not adequately sanitize user-supplied input in guest book entries. Because of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

Easy Address book Webserver 1.2 CSRF

No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.27 views

Calibre E-Book Reader Local Root

No description provided by source. / .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss / include stdio.h includ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.25 views

XP Book 3.0 - login Admin Exploit

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.32 views

Easy Address Book Web Server 1.6 - Stack Buffer Overflow

No description provided by source. !/usr/bin/env python Exploit Title: Easy Address Book Web Server 1.6 stack buffer overflow Date: 19 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.efssoft.com/web-address-book-server.html Software Link:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

PHP Address Book 3.1.5 - Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29560/info PHP Address Book is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

Jax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

Yet Another NOCC <= 0.1.0 - Local File Inclusion Vulnerability

No description provided by source. Yet Another NOCC 0.1.0 = Local File Inclusion Vulnerabilities YANOCC is a simple and fast webmail client which can handle POP3, SMTP, and IMAP servers. YANOCC is based on NOCC's code and is written with PHP4. It features multi-language support, MIME attachments,...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.31 views

Joomla Front-edit Address Book Component (com_addressbook) Blind SQL Injection

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author...

7.1AI score
SaveExploits0
Rows per page
Query Builder