Google Awards $5k Bounty for Youtube Video Delete Bug

Student and security researcher Kamil Hismatullin recently took Google up on its vulnerability research grant offer, accepting a $1337 cash advance in exchange for a promise to seek out cross-site scripting and cross-site request forgery bugs in YouTube’s Creator Studio. While conducting that...

Fedora 21 : qt-creator-3.3.2-2.fc21 (2015-3574)

Add SSH host key verification to built-in SSH client. Update to version 3.3.2, see https://qt.gitorious.org/qt-creator/qt-creator/raw/2fb9c3c7abc93a9237e 72972ee222b2a2628007e:dist/changes-3.3.2 for details. Note that Tenable Network Security has extracted the preceding description block directly...

Serendipity CMS - XSS Vulnerability in Version 2.0

Serendipity CMS - XSS Vulnerability in Version 2.0 ---------------------------------------------------------------- Product Information: Software: Serendipity CMS Tested Version: 2.0, released 23.1.2015 Vulnerability Type: Cross-Site Scripting CWE-79 Download link: http://www.s9y.org/12.html...

[SECURITY] Fedora 21 Update: qt-creator-3.3.2-2.fc21

Qt Creator is a cross-platform IDE integrated development environment tailored to the needs of Qt developers...

[SECURITY] Fedora 20 Update: qt-creator-3.2.2-2.fc20

Qt Creator is a cross-platform IDE integrated development environment tailored to the needs of Qt developers...

Fedora Update for qt-creator FEDORA-2015-3573

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for qt-creator FEDORA-2015-3574

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aesop-GIF-Creator-2.1

Aesop is a powerful tool that allows you to create animated GIF images banners, buttons, labels and headings for your website and even GIF wallpapers for your mobile phone quickly and easily click to see samples. You can use an antialiased 3D-Text, shapes rectangles, rounded rectangles, ellipses...

xMid Deface Page Creator Tool

xMid Deface Page Creator is a computer program that allows users to create HTML pages, in order to upload them to web servers and deface them. This tool is commonly used by attackers, and therefore upload of files created by this tool may indicate an attempt to deface a web server...

Critical: docker

Issue Overview: Docker versions 1.3.0 through 1.3.1 allowed security options to be applied to images, allowing images to modify the default run profile of containers executing these images. This vulnerability could allow a malicious image creator to loosen the restrictions applied to a container'...

CVE-2014-5860

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5860

The CVE-2014-5860 entry concerns the Android app Slide Show Creator (com.amem) version 4.4.3. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5860: Undefined Security Weakness

The Slide Show Creator aka com.amem application 4.4.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6845

Name of the Vulnerable Software and Affected Versions The Slide Show Creator aka com.amem application version 4.4.3 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5645

The CVE-2014-5645 entry concerns the CamScanner -Phone PDF Creator (com.intsig.camscanner) for Android (version 3.4.0.20140624). The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain...

PT-2014-6630

Name of the Vulnerable Software and Affected Versions CamScanner - Phone PDF Creator version 3.4.0.20140624 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...

CVE-2014-5645: Undefined Security Weakness

The CamScanner -Phone PDF Creator aka com.intsig.camscanner application 3.4.0.20140624 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Karaoke Video Creator 2.2.8 - Denial of Service Vulnerability

No description provided by source. Exploit Title: Karaoke Video Creator Denial of Service Vulnerability Author: PASSEWORD Date: 2010-08-20 Software Link: http://www.powerkaraoke.com/src/prod-karaoke-video-creator.php Version : 2.2.8 Greetz 2 : d4rk-h4ck3r , And All Muslims And Tunisian Hackers...

AoA DVD Creator 2.5 - ActiveX Stack Overflow Exploit

No description provided by source. Exploit Title: AoA DVD Creator V2.5 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/aoadvdcreator.exe Version: v2.5 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 html mail--...