4990 matches found
Input validation
The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5655
CM Browser - Fast & Secure (com.ksmobile.cb) for Android 5.0.50 does not verify X.509 certificates from SSL servers, enabling MITM via crafted certificates. Root cause: lack of server certificate verification in SSL/TLS validation. Impact: potential exposure of sensitive information. Exploitation...
PT-2014-6760
Name of the Vulnerable Software and Affected Versions The Super Fast Browser aka iron.web.jalepano.browser version 2.0.5.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
PT-2014-6695
Name of the Vulnerable Software and Affected Versions Cisco Class Locator Fast Lane affected versions not specified Description The issue concerns the Cisco Class Locator Fast Lane application for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle...
PT-2014-6640
Name of the Vulnerable Software and Affected Versions CM Browser - Fast & Secure aka com.ksmobile.cb version 5.0.50 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
CVE-2014-5655: Undefined Security Weakness
The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5710: Undefined Security Weakness
The Cisco Class Locator Fast Lane aka com.tabletkings.mycompany.fastlane.cisco application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5775: Undefined Security Weakness
The Super Fast Browser aka iron.web.jalepano.browser application 2.0.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Fast payment and some credit card functions whether there is a defect? Know Bank card number and Expiration Date can consumer-vulnerability warning-the black bar safety net
Someone once broke a credit card just know the card number and expiration date on the CAN in some of the website on any purchase, while various payment products such as tenpay, Alipay launched fast pay only need to provide Bank card number, ID number, name, and phone number can be opened fast...
WAF-FLE v0.6.4 - OpenSource ModSecurity Console
WAF-FLE is a OpenSource ModSecurity Console, allows modsecurity admin to store, view and search events sent by sensors using a graphical dashboard to drill-down and find quickly the most relevant events. It is designed to be fast and flexible, while keeping a powerful and easy to use filter, with...
NewGOZ Gameover Zeus Botnet Rebuilds
It didn’t take long for an updated version of GameOver Zeus to make some headway in rebuilding itself. Research published today from Arbor Networks demonstrates that cybercriminals behind GameOver Zeus, which was taken down by law enforcement in early June, have renewed the botnet with at least...
Sagem Fast 3304-V1 - Denial Of Service Vulnerability
No description provided by source. Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page :...
Sagem Fast 3304-V1 - Denial Of Service Vulnerability
Exploit for hardware platform in category dos / poc Title : Sagem email protected 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem email protected 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact :...
Sagem Fast 3304-V1 - Denial of Service
Sagem Fast 3304-V1 - Denial of Service Title : Sagem F@st 3304-V1 denial of service Vulnerability Vendor Homepage : http://www.sagemcom.com Tested on : Firefox, Google Chrome Tested Router : Sagem F@st 3304-V1 Date : 2014-07-26 Author : Z3ro0ne Contact : [email protected] Facebook Page :...
[SECURITY] Fedora 20 Update: lz4-r119-1.fc20
LZ4 is an extremely fast loss-less compression algorithm, providing compres sion speed at 400 MB/s per core, scalable with multi-core CPU. It also features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed limits on multi-core systems...
[SECURITY] Fedora 20 Update: lzo-2.08-1.fc20
LZO is a portable lossless data compression library written in ANSI C. It offers pretty fast compression and very fast decompression. Decompression requires no memory. In addition there are slower compression levels achieving a quite competitive compression ratio while still decompressing at this...
Fast Click (<= 1.1.3 , <= 2.3.8) (show.php) Remote File Inclusion Exploit
No description provided by source...
Sagem Router Fast 3304/3464/3504 Telnet Authentication Bypass
No description provided by source. !/home/bin/python Remote Exploit: SAGEM ROUTER FAST 3304/3464/3504 - Telnet Authentication bypass Date: 15-August-2011 Author: Elouafiq Ali Version: 3304-V1 / 3304-V2 / 3464 / 3504 Tested on: Linux Ubuntu 11.04, Linux Backtrack 5 Tested Router: SAGEM FAST 3304-V...
Web Wiz Forums <= 9.07 (sub) Remote Directory Traversal Vulnerability
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz ForumsTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal Vulnerable Version: 9.07 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz Forums bullet...
web wiz rich text editor 4.0 - Multiple Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz Rich Text EditorTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal + HTM/HTML file creation on the server Vulnerable Version: 4.0 Exploit: Available Fix Available: No! Fast Solution is...