CVE-2014-6752: Undefined Security Weakness

The Mindless Behavior Fan Base aka com.mindless.behavior.fan.base application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Uiga Fan Club SQL Injection Vulnerability

No description provided by source. Exploit Title: Uiga Fan Club SQL Injection Vulnerability Date: 22/03/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net/products/ufc.html Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip Version: N/A Tested on: Win Wamp CVE : N...

Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities

No description provided by source. Document Title: =============== Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1235 Release Date: ============= 2014-03-28 Vulnerability Laboratory ID VL-ID:...

Uiga Fan Club <= 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source...

CVE-2014-4509

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

Design/Logic Flaw

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

CVE-2014-4509

The CVE-2014-4509 issue affects Novell Identity Manager (IDM) 4.0.2, specifically the MKDQUOTESAFE function in the Fan-out driver scripts within Fan-Out Platform Services. The vulnerability allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert...

CVE-2014-4509

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

CVE-2014-4509: Undefined Security Weakness

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

PT-2014-5940

Name of the Vulnerable Software and Affected Versions Novell Identity Manager version 4.0.2 Description The issue allows local users to execute arbitrary commands. This is achieved by leveraging eDirectory POSIX attribute changes to insert shell metacharacters in the MKDQUOTESAFE function within...

Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities

Document Title: =============== Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1235 Release Date: ============= 2014-03-28 Vulnerability Laboratory ID VL-ID: ====================================...

Japanese Game maker Club Nintendo's 24,000 accounts Hacked

Japanese video game maker Nintendo recently revealed that one of its main fan sites Club Nintendo got hacked and Out of 15.5 million login attempts in brute-force process, almost 24,000 user accounts have been hijacked early last month. Nintendo said it first became aware of the illicit logins on...

CVE-2012-4055

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

Sql injection

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2012-4055

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2012-4055

CVE-2012-4055 is a SQL injection vulnerability in index2.php of Uiga Fan Club, allowing remote attackers to execute arbitrary SQL via the p parameter. The issue is caused by improper input handling in that script, enabling potentially unauthorized data access or modification. The connected CIRCL ...

CVE-2012-4055: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

PT-2012-5173

Name of the Vulnerable Software and Affected Versions Uiga Fan Club affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index2.php" endpoint. Recommendations At the moment, there is no...

Lady Gaga Website The Latest in String of Celebrity Hacks

A collective of hackers known as SwagSec claims to have broken into the UK website of Lady Gaga and made off with information on thousands of registered fans, according to a report from the UK’s Mirror. The hack, just the latest in a string of attacks on high profile artists, was made public afte...

Lady Gaga website hacked and fans details stolen by Hackers

Lady Gaga website hacked and fans details stolen by Hackers Lady Gaga has called in police after thousands of her fans personal details were stolen from her website. Her record label Univeral acted after the site was hacked into by US cyber attackers SwagSec. A source said: "She's upset and hopes...