1100 matches found
Joomla! Component com_hdflvplayer 2.1.0.1 - Arbitrary File Download
Joomla! Component comhdflvplayer 2.1.0.1 - Arbitrary File Download !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...
Joomla HD FLV 2.1.0.1 SQL Injection
!/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/ Dork google 2:...
Joomla! Component com_hdflvplayer < 2.1.0.1 - SQL Injection
!/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1: inurl:/component/hdflvplayer/ Dork google 2:...
Joomla HD FLV 2.1.0.1 SQL Injection Vulnerability
Joomla HD FLV component version 2.1.0.1 suffers from a remote SQL injection vulnerability. !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...
Joomla! Component com_hdflvplayer 2.1.0.1 - SQL Injection
Joomla! Component comhdflvplayer 2.1.0.1 - SQL Injection !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1:...
Debian DSA-3062-1 : wget - security update
HD Moore of Rapid7 discovered a symlink attack in Wget, a command-line utility to retrieve files via HTTP, HTTPS, and FTP. The vulnerability allows to create arbitrary files on the user's system when Wget runs in recursive mode against a malicious FTP server. Arbitrary file creation may override...
DLA-82-1 wget - security update
Bulletin has no description...
NAT-PMP Security Vulnerability Affects 1.2M Routers
Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...
CVE-2014-7517
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7517
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7517
The CVE-2014-7517 entry affects the Myanmar Movies HD Android app (package com.wmyanmarmoviesHD) version 0.1. The app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via TLS. The NVD entry lists a MEDIUM s...
CVE-2014-6911
The diziturky HD 2015 aka com.adv.diziturky application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The diziturky HD 2015 aka com.adv.diziturky application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6911
The diziturky HD 2015 aka com.adv.diziturky application 2014 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6911
CVE-2014-6911 concerns the Android app “diziturky HD 2015” (package com.adv.diziturky) from 2014, which fails to verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and access sensitive data via a crafted certificate. The vulnerability is corrobor...
CVE-2014-6691
The vulnerability CVE-2014-6691 affects UC Browser HD (com.uc.browser.hd) for Android, version 3.3.1.469. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Impact is i...
CVE-2014-6664
The CVE-2014-6664 entry concerns the Android app Latin Angels Music HD (com.applizards.lafreetj) v2.0, where SSL/TLS connections do not verify X.509 certificates. This missing certificate validation can enable man-in-the-middle attackers to spoof servers and access sensitive information via a cra...
CVE-2014-6691
The UC Browser HD aka com.uc.browser.hd application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6010
CVE-2014-6010 concerns the Android app Rasta Weed Widgets HD (aw.awesomewidgets.rastaweed) version 4, where the component handling SSL/TLS does not verify X.509 certificates. The root cause is certificate validation bypass, enabling MITM attackers to spoof servers and disclose sensitive data via ...