CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7798

CVE-2014-7798 affects the Coca-Cola FM Brasil Android app (com.enyetech.radio.coca_cola.fm_br, version 2.0.41709). The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MitM attackers to spoof servers and access sensitive information via a...

CVE-2014-7798

The Coca-Cola FM Brasil aka com.enyetech.radio.cocacola.fmbr application 2.0.41709 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

phpWebThings <= 1.5.2 (help.php module) Local File Inclusion Vuln

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : phpwebthings = 1.5.2 Site : http://sourceforge.net/projects/phpwebthings/ Down :...

Joomla Component Seyret (com_seyret) - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Joomla Component Seyret comseyret Date: 2010-06-26 Author: mlk Software Link: null Version: null Tested on: Linux,BSD and windows CVE : null Code : on paper Joomla Component Seyret comseyret - Local File Inclusion Vulnerability + Discovered by : m...

yogurt 0.3 (xss/SQL Injection) Multiple Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site :...

Virtual Store Open 3.0 Acess SQL Injection

No description provided by source. !/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection...

Abtp Portal Project 0.1.0 LFI Exploit

No description provided by source. !/usr/bin/perl =about ---------------------------------------------------------------------------------------------------- Name : Abtp Portal Project = 1.0 Site : http://sourceforge.net/projects/abtpportal/ Down :...

CGR BRASIL CMS SQL Injection

Multiple Sql Injection on CGR BRASIL CMS + Date: 21/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.cgrbrasil.com.br + Contact: [email protected] + Tested on: Windows 7 and Linux + Exploit : http://host/print.php?id=SQL Injection + Exploit2 :...

freepost 0.1 r1 - Multiple Vulnerabilities

Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal , Habib, Djamal , Boukhors .. etc Exploit:...

Microsoft.com.br (Brasil) hacked by TG hacker

Microsoft.com.brBrasil hacked byTG hacker Microsoft Brasil https://microsoft.com.br/ Got defaced by Hacker named "TG ". Hacker redirect server address microsoft.com.br to the page of Microsoft Brazil. Instead of being sent to the developer page of Windows, the Internet user that accesses the...

Microsoft.com.br (Brasil) hacked by TG hacker

Microsoft.com.br Brasil hacked by TG hacker Microsoft Brasil Got defaced by Hacker named "TG". Hacker redirect server address microsoft.com.br to the page of Microsoft Brazil. Instead of being sent to the developer page of Windows, the Internet user that accesses the address is faced with a messa...

CoolZip 2.0 zip Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow CoolZip 2.0 +Date: 12\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/coolzip-download-7097.html +Version: 2.0 +Tested On WIN-XP SP3 Portugues Brasil +CVE: N/A x...

FastCompras Store (galeria.php) E-Commerce SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================================== FastCompras Store galeria.php E-Commerce SQL Injection Vulnerability ====================================================================== Exploit Title: FastCompras Store...

Joomla Component QContacts (com_qcontacts) SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla...

Joomla QContacts SQL Injection

Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla Component QContacts comqcontacts -...

Joomla Component com_qcontacts SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comqcontacts SQL Injection Vulnerability ========================================================== Exploit Title: Joomla Component QContacts comqcontacts - SQL...

Joomla! Component com_sef - Local File Inclusion

Joomla! Component comsef - Local File Inclusion Exploit Title: Joomla Component SEF comsef - LFI Vulnerability Date: 04, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomsef.zip Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component SEF comsef - Local Fi...

Joomla ChronoForms Blind SQL Injection

Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability ! Discovered by : mlk Renan ! Teams : c00kies ,...