CVE-2014-7536: Undefined Security Weakness

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8137

Name of the Vulnerable Software and Affected Versions The Physics Forums application version 3.9.22 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

PT-2014-8075

Name of the Vulnerable Software and Affected Versions Service Academy Forums application version 3.6.12 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from...

Snitz Forums 2000 3.4.07 Database Disclosure

!/usr/bin/perl -w Snitz Forums 2000 v3.4.07 Database Disclosure Exploit Author : indoushka Vondor : http://forum.snitz.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Snitz Forums 2000 v3.4.07 Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request =...

Toast Forums Database Disclosure

!/usr/bin/perl -w Toast Forums Database Disclosure Exploit Author : indoushka Vondor : ToastForums.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Toast Forums Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request = $useragent-get$url,":contentfile" = "D:/data.mdb";...

CVE-2014-6864

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6864

CVE-2014-6864 concerns the Forest River Forums Android app (package com.socialknowledge.forestriverforums) version 3.7.5. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6864: Undefined Security Weakness

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7540

Name of the Vulnerable Software and Affected Versions The Forest River Forums application version 3.7.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

Paypal Inc BB #32 - Multiple Persistent Vulnerabilities

Document Title: =============== Paypal Inc BB 32 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=716 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ==================================== 716...

Design/Logic Flaw

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5889

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5889

The CVE-2014-5889 incident concerns the Android Forums (com.tapatalk.androidforumscom) Android app, version 2.4.4.9, which fails to verify X.509 certificates when connecting to SSL servers. Root cause: improper TLS/SSL validation enabling man-in-the-middle attackers to spoof servers and access se...

MGASA-2014-0379 Updated moodle packages fix security vulnerbilities

Updated moodle packages fix security vulnerabilities: In Moodle before 2.6.5, users who had not yet posted the required answer in a Q&A forum in order to access past posts were able to see the name of the last person who had posted, as other authors are visible in /mod/forum/view.php before the...

CVE-2014-5889: Undefined Security Weakness

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6874

Name of the Vulnerable Software and Affected Versions Android Forums aka com.tapatalk.androidforumscom version 2.4.4.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

Malicious Advertisements Found on Java.com, Other High-Profile Sites

A New York-based online ad network company AppNexus, that provides a platform specializing in real-time online advertising, has again been spotted as the origin of a recent "malvertising" campaign that makes use of the Angler Exploit Kit to redirect visitors to malicious websites hosting the Aspr...

Georgia Tech Releases BlackForest Threat Intelligence Tool

Enterprises longing for an automated system that sends up a smoke signal that attackers may be planning a move against a particular organization or are promoting a new tool that targets companies in a specific industry may have had their wish come true. Georgia Tech Research Institute has release...

vBulletin 5.1.2 SQL Injection

?php / Author: Nytro Powered by: Romanian Security Team Price: Free. Educational. / errorreportingEALL; iniset'displayerrors', 1; // Get arguments $targeturl = isset$argv1 ? $argv1 : 'https://rstforums.com/v5'; $expression = strreplace'/', '\/', $targeturl; // Function to send a POST request...

New Kronos Banking Malware Advertised On Russian Forums

Criminals are advertising a new banking Trojan on Russian forums, one going for a hefty price and being marketed as a method of evading detection and analysis. To date, however, security researchers have yet to obtain a sample of Kronos, which is available on a few forums for pre-order at a cost ...