CVE-2014-7616

The Physics Forums aka com.tapatalk.physicsforumscom application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7536

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Physics Forums aka com.tapatalk.physicsforumscom application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7616

The Physics Forums aka com.tapatalk.physicsforumscom application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7616

CVE-2014-7616 affects the Android version of the Physics Forums app (3.9.22). The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, enabling potential MITM attackers to spoof SSL servers and access sensitive information via a crafted certificate. ...

CVE-2014-7536

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7616: Undefined Security Weakness

The Physics Forums aka com.tapatalk.physicsforumscom application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7536: Undefined Security Weakness

The Service Academy Forums aka com.tapatalk.serviceacademyforumscom application 3.6.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Toast Forums Database Disclosure

!/usr/bin/perl -w Toast Forums Database Disclosure Exploit Author : indoushka Vondor : ToastForums.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Toast Forums Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request = $useragent-get$url,":contentfile" = "D:/data.mdb";...

Snitz Forums 2000 3.4.07 Database Disclosure

!/usr/bin/perl -w Snitz Forums 2000 v3.4.07 Database Disclosure Exploit Author : indoushka Vondor : http://forum.snitz.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Snitz Forums 2000 v3.4.07 Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request =...

CVE-2014-6864

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6864

CVE-2014-6864 concerns the Forest River Forums Android app (package com.socialknowledge.forestriverforums) version 3.7.5. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6864: Undefined Security Weakness

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Paypal Inc BB #32 - Multiple Persistent Vulnerabilities

Document Title: =============== Paypal Inc BB 32 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=716 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ==================================== 716...

Design/Logic Flaw

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5889

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5889

The CVE-2014-5889 incident concerns the Android Forums (com.tapatalk.androidforumscom) Android app, version 2.4.4.9, which fails to verify X.509 certificates when connecting to SSL servers. Root cause: improper TLS/SSL validation enabling man-in-the-middle attackers to spoof servers and access se...

MGASA-2014-0379 Updated moodle packages fix security vulnerbilities

Updated moodle packages fix security vulnerabilities: In Moodle before 2.6.5, users who had not yet posted the required answer in a Q&A forum in order to access past posts were able to see the name of the last person who had posted, as other authors are visible in /mod/forum/view.php before the...

CVE-2014-5889: Undefined Security Weakness

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...