Lucene search
+L

208 matches found

hackapp
hackapp
added 2016/04/01 9:48 a.m.12 views

Guess the Difference 76 - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Guess the Difference 76 published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:47 a.m.10 views

Guess The Character - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Guess The Character published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2015/12/02 12:47 p.m.10 views

careers.guess.eu XSS vulnerability

Vulnerable URL: http://careers.guess.eu/elencoannunci.php?paginaScelta=1perpagina=4an=asd"===chiave=tbm=4531=4958"submit=Search Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/09/21 12:00 a.m.46 views

Fedora 23 : nrpe-2.15-7.fc23 (2015-15398)

Use %configure macro as it deals with config.sub/guess and various flags properly ---- nrpe-2.15-6.el7 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.el6 - Fix spec file for missing /usr/share/libtool/config/config.guess nrpe-2.15-6.fc23 - Fix spec file for missing...

7.5CVSS5.3AI score0.15312EPSS
SaveExploits7References4
CVE
CVE
added 2014/10/20 10:00 a.m.40 views

CVE-2014-7624

The CVE-2014-7624 entry affects the Android app “Guess the Pixel Character Quiz” (com.aiadp.pixelcQuiz) version 1.3, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2014/09/19 10:55 a.m.17 views

CVE-2014-5962

The Guess The Actor aka com.gamelikeinc.actors application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/19 10:00 a.m.46 views

CVE-2014-5962

The CVE-2014-5962 entry concerns the Android app Guess The Actor (com.gamelikeinc.actors) version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2014/09/09 10:55 a.m.20 views

CVE-2014-5825

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
added 2014/09/09 10:55 a.m.15 views

Information disclosure

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2014/09/09 10:00 a.m.46 views

CVE-2014-5825

The Guess The Movie (com.june.guessthemovie) Android app (version 2.982) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NVD reports a CVSSv2 base score of 5.4 (MEDIUM) with ...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/09 10:00 a.m.28 views

CVE-2014-5825

The Guess The Movie aka com.june.guessthemovie application 2.982 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
OSV
OSV
added 2014/01/21 6:55 p.m.11 views

DEBIAN-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.6AI score0.00375EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2014/01/21 6:55 p.m.12 views

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS5.5AI score0.00375EPSS
SaveExploits0References8
OSV
OSV
added 2014/01/21 6:55 p.m.8 views

UBUNTU-CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.7AI score0.00375EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2013/09/04 3:50 p.m.28 views

Update to Bitcoin Client Fixes DoS Bug, Password Strength

The developers behind Bitcoin-QT, a software wallet used to protect and back up Bitcoin currency, have pushed out a new version of the client, fixing a critical denial-of-service bug, three security issues and fortifying password security. Version 0.8.4 of the original Bitcoin client was posted t...

5CVSS0.2AI score0.02278EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2013/04/04 12:00 a.m.38 views

Debian Security Advisory DSA 2658-1 (postgresql-9.1 - several vulnerabilities)

Several vulnerabilities were discovered in PostgreSQL database server. CVE-2013-1899Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center discovered that it was possible for a connection request containing a database name that begins with - to be crafted that can damage or...

8.5CVSS0.5AI score0.54312EPSS
SaveExploits4References1
RedHat Linux
RedHat Linux
added 2013/02/20 4:19 p.m.7 views

util-linux: mount folder existence information disclosure

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

2.1CVSS6.5AI score0.00375EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2012/06/08 12:00 a.m.46 views

Fedora 15 : groff-1.21-4.fc15 (2012-8590)

older security fixes : - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that...

3.3CVSS6.6AI score0.00373EPSS
SaveExploits0References7
myhack58
myhack58
added 2011/07/29 12:00 a.m.211 views

Houben figure enterprise website system cookies injection-vulnerability warning-the black bar safety net

Based on asp+access corporate website source code, database has been provided with an anti-download the site more secure. To modify a site, custom your own to the page, and landscaping page is your own complete, website source code program is complete, the background powerful. Source code downloa...

0.3AI score
SaveExploits0
myhack58
myhack58
added 2011/07/05 12:00 a.m.18 views

Core topology of the Tourist Information Portal system 1.1 injection vulnerability-vulnerability warning-the black bar safety net

Core topology of the tourist information portal of the system is Yongzhou core topology of the tourist information web site management system includes a corporate web site commonly used in a variety of functions, with a complete backend management system, The present program without any feature...

6.9AI score
SaveExploits0
Rows per page
Query Builder