408 matches found
CVE-2014-5735
The Buy A Gift (com.wBuyAGift) Android app version 13529.90084 does not verify SSL/X.509 certificates, allowing MITM attackers to spoof servers and capture sensitive data via crafted certificates. This is CVE-2014-5735; supported by NVD/NIST and related records in connected documents. No exploit ...
CVE-2014-5735
The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5757
The CVE-2014-5757 entry affects the Android app Buy Tickets (com.xcr.android.buytickets) version 2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...
CVE-2014-5757
The Buy Tickets aka com.xcr.android.buytickets application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5756
The Buy 99 Cents Only Products aka com.ww99CentsOnlyStores application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5734
The CVE-2014-5734 entry concerns the Android app Buy Books (com.wBooksForSale) version 0.1, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...
CVE-2014-5756
The CVE-2014-5756 entry concerns the Android app “Buy 99 Cents Only Products” (com.ww99CentsOnlyStores) version 0.1, which does not validate X.509 certificates when connecting to SSL servers. This creates a susceptibility to man-in-the-middle attacks where a crafted certificate can spoof servers ...
CVE-2014-5635
The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5577
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5635
The Buy Yorkshire Conference aka com.gotfocus.buyyorkshire application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5577
AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...
CVE-2014-5577
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5635
The CVE-2014-5635 entry concerns the Android app Buy Yorkshire Conference (com.gotfocus.buyyorkshire) version 1.4, which fails to verify X.509 certificates from SSL servers. This creates a certificate validation bypass, allowing man-in-the-middle attackers to spoof legitimate servers and extract ...
Auktionshaus 4 - news.php SQL Injection Vulnerability
No description provided by source. Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter...
Dimensions buy system sql vulnerability affects to the latest 4. Version 2-bug warning-the black bar safety net
Before using this buy system of the free don't know how to now start charging like This vulnerability also in several low version has always been there! Vulnerability file: app/source/articleshow.php ? php if $REQUEST "m" == "Article" && $REQUEST "a" == "showByUname" $uname = $REQUEST"uname"; //n...
Easy to buy program SQL injection vulnerability-vulnerability warning-the black bar safety net
Easy to buy management system is a positioning high-end market group buying content management system,to the lowest cost,minimal human input in the shortest time to set up a fully functional, excellent performance, huge size and easy to maintain website platform. Not filtered lead injection ! ! T...
The top-dimensional group buy navigation sql injection vulnerability analysis-vulnerability warning-the black bar safety net
Just opened, it is found that their number is blacklisted, the speed of the back posts, the tension?, the speed got a system to look at, okay, I admit I just looked under the array is not filtered directly submitted to the query statement, the vulnerability to ask in the userModule. class. php fi...
