106 matches found
Design/Logic Flaw
The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6827
The DK ONLINE Beta aka com.sgmobile.dkonline application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6827
The CVE-2014-6827 entry involves the DK ONLINE Beta Android app (com.sgmobile.dkonline) version 1.0.2 where SSL servers’ X.509 certificates are not verified. This allows MITM attackers to spoof servers and read sensitive data via crafted certificates. The publicly available data confirms the vuln...
One million pages infected by Lilupophilupop SQL injection
One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...
Unfixed XSS vulnerability at www.easyserver2.dk
Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.easyserver2.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It ...
