CVE-2014-5685

The Runtastic Heart Rate aka com.runtastic.android.heartrate.lite application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5592

CVE-2014-5592 affects the Android app Free Dating Heart COL (com.choiceoflove.dating) version 2.6.1. The root cause is the app failing to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

CVE-2014-5648

CVE-2014-5648 affects the Android app “Chat, Flirt & Dating Heart JAUMO” (com.jaumo) at version 2.7.5. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, which enables a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via...

CVE-2014-5685

CVE-2014-5685 concerns the Android app Runtastic Heart Rate (com.runtastic.android.heartrate.lite), version 1.3, which does not verify X.509 certificates from SSL servers. This approval gap allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

OpenSSL issued a warning: memory 1 0 years of vulnerability may be hackers for“man in the middle”attack-vulnerability warning-the black bar safety net

On Thursday, the OpenSSL Foundation issued a warning that one already exists 1 0 years of the vulnerabilities could lead to hackers through the use of OpenSSL to encrypt the traffic to launch“man in the middle”attack. Information security experts are still trying to solve the OpenSSL encryption...

Elizabeth Taylor's Death Triggers Spam Campaign

Yesterday we learned that Elizabeth Taylor, an American icon for some seven decades, died of congestive heart failure at 79. Today, Kaspersky Lab expert Dmitry Bestuzhev informs us that the news of her death is being exploited via social engineering scams on Twitter. The scam uses a shortened,...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

Heart empty Forum(CKong) v2. 5 SQL injection vulnerability-vulnerability warning-the black bar safety net

Program: heart empty ForumCKong Version:=2.5 Type: sql injection Vulnerability analysis 1, The post.php | ? requireonce"include/config.inc.php"; requireonce'include/functions.inc.php'; $fid=intval$fid; $tid=intval$tid; $pid=intval$pid; ......... if!$ Cerrormsg if$postid $sql='select...

CVE-2005-4563

SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875...

CVE-2005-4563

CVE-2005-4563 describes a SQL injection vulnerability in Enterprise Heart Enterprise Connector 1.0.2 (main.php) allowing remote attackers to execute arbitrary SQL via the loginid parameter and bypass login authentication. This is a different vulnerability from CVE-2005-3875, which covers multiple...

CVE-2005-4563

SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875...