234 matches found
CVE-2014-5790
The CVE-2014-5790 entry documents a vulnerability in the Android application “Pets Fun House” (package mominis.Generic_Android.Pets_Fun_House), version 1.0.1, where X.509 certificates are not verified when establishing SSL connections. This insecure TLS handling enables man-in-the-middle attacker...
Information disclosure
The Fun Preschool Creativity Game aka air.com.tribalnova.ilearnwith.ipad.MotherAppEn application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5624
The CVE-2014-5624 entry applies to the Android app “The Sniper Shooter Free - Fun Game” (com.fungamesforfree.snipershooter.free), version 2.8, where SSL connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof trusted servers and obtain sensitive ...
CVE-2014-5554
CVE-2014-5554 : The Android app “Fun Preschool Creativity Game” (package air.com.tribalnova.ilearnwith.ipad.MotherAppEn), version 1.6.2, does not verify SSL/TLS X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate...
[SECURITY] Fedora 20 Update: ffgtk-0.8.6-7.fc20
Fritz Fun ffgtk is a clean solution for controlling the FRITZ!Box or compatible router with Linux. It offers a rich feature list, including call er monitor and fax support. It offers integration with the KDE, evolution and Thurderbird address books. Some plug-ins are packaged separately...
Drake CMS < 0.2.3 ALPHA rev.916Remote File Inclusion Vulnerability
No description provided by source. Coding 4 Fun c4f.pl Drake CMS v0.2.2 ALPHA rev.846 http://drakecms.org ; Class = Remote File Inclusion ; Download = https://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420102 ; Found by = GregStar gregstaratc4fdotpl ;...
otscms <= 2.1.5 (sql/xss) Multiple Vulnerabilities
No description provided by source. Coding 4 Fun Name = OTSCMS 2.1.5 by Wrzasq http://otscms.com ; Class = Sql Injection / XSS ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4f.pl http://c4f.pl ;...
FUN labs Game Engine Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12862/info Multiple FUN labs games are affected by remote denial of service vulnerabilities. A remote attacker can cause a game server to stop responding by sending an empty UDP packet. Another vulnerability can allow a...
joomla component flash fun! 1.0 - Remote File Inclusion Vulnerability
No description provided by source. Joomla Flash Fun! Component RFI Bug in : /administrator/components/comjoomlaflashfun/admin.joomlaflashfun.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: comjoomlaflashfun Example:...
linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes
No description provided by source. / linux/x86 cat /dev/urandom /dev/console, no real profit just for kicks - 63 bytes - izik [email protected] / char shellcode = \x31\xc9 // xor %ecx,%ecx \x51 // push %ecx \x68\x6e\x64\x6f\x6d // push $0x6d6f646e \x68\x2f\x75\x72\x61 // push $0x6172752f...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Network fun shopping system landing any of the account Bugs(except admin)-vulnerability warning-the black bar safety net
Run into a lot of asp shopping Station is network fun kernel change, but without a column outside of both the existence of this vulnerability, including the latest and most older network fun, relatively tasteless, can't get webshell to. But the harm is relatively large, you can login and modify a...
TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow
!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...
FleaHttpd - Remote Denial of Service
FleaHttpd - Remote Denial of Service !/usr/bin/python """ FleaHttpd Remote Denial Of Service Exploit by condis "FleaHttpd is a http daemon written from scratch in C. When working as a static file server, data show that under certain condition, fleahttpd's speed for static file retrieving can be...
Suzuki Official Website of Azerbaijan hacked by Co-cain Tm
Suzuki Official Website of Azerbaijan hacked by Co-cain Tm Suzuki Official Website of Azerbaijan today defaced by Co-cain Tm Hackers. The home page contain following lines: Cg 125 For Ever ! Co-cain Tm Sp Tnx 2 Skitt3r The Mirror of this hack also available on Zone-H. Reason of hack is unknown,...
Unfixed XSS vulnerability at fun-images.com
Security researcher Dave, has submitted on 22/03/2011 a cross-site-scripting XSS vulnerability affecting fun-images.com, which at the time of submission ranked 19401544 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...
Network fun online shopping users fashion Edition Build 1 0 1 1 0 1 SQL injection exploit-vulnerability warning-the black bar safety net
listshj. asp page there is the injection, not for authentication, wherein %dim shjiaid shjiaid=request. querystring"id" set rs=server. createobject"adodb. recordset" rs. open "select from shjia where shjiaid=" shjiaid ,conn,1,1% ID is not filtered, and injected into the generated/admin/listshj...
Video Games Rentals Script - SQL Injection
Exploit Title: video games rentals Script SQL injection Vulnerability Date: 11/02/2010 Author: JaMbA Software Link: N/A Version: all version Tested on: Windows & Linux CVE : ::::::::::::::::::::::::: Exploit Title : video games rentals Script SQL injection Vulnerability Author : JaMbA Script Site...
Safari 3.2.3 (Win32) JavaScript (eval) Remote DoS Exploit
No description provided by source. !/usr/bin/perl letsgosurfinnowonsafari.pl AKA Safari 3.2.3 Win32 JavaScript 'eval' Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Safari crashes when interpreting a webpage that calls the...