Design/Logic Flaw

The Better Homes and Gardens Aus aka com.pacificmagazines.betterhomesandgardens application @7F0801B2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7720

CVE-2014-7720 affects the Better Homes and Gardens Aus Android app (com.pacificmagazines.betterhomesandgardens). The vulnerability is that the app does not validate SSL X.509 certificates from servers, enabling potential man-in-the-middle attacks to spoof servers and exfiltrate sensitive data via...

CVE-2014-7720

The Better Homes and Gardens Aus aka com.pacificmagazines.betterhomesandgardens application @7F0801B2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Homes 4 Sale 'results.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30517/info Homes 4 Sale is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Memorial Web Site Script Multiple Arbitrary Delete Vuln

No description provided by source. ----------------------------------------------------------------------------------------- Memorial Web Site Script Multiple Arbitrary Delete Vuln ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Emai...

Linksys WRT160N - Multiple Vulnerabilities

Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do...

Linksys WRT160N - Multiple Vulnerabilities

Linksys WRT160N - Multiple Vulnerabilities Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fas...

Linksys WRT160N XSS / CSRF / Command Injection

Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do...

FBI Raids Homes of Suspected Anonymous Hackers at New York

FBI Raids Homes of Suspected Anonymous Hackers at New York The FBI executed search warrants at the New York homes of three suspected members of notorious hacking group Anonymous early Tuesday morning. More than 10 FBI agents arrived at the Baldwin. The agents spent an hour and 40 minutes at...

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection Author: R4dc0re Exploit Title: HotWebScripts HotWeb Rentals SQL injection Vulnerability Date: 05-12-2010 Vendor or Software Link: http://www.hotwebscripts.co.uk/ Category:WebApp Price: £150 Contact: [email protected] Website: www.1337db.com...

Memorial Web Site Script Arbitrary Deletion

----------------------------------------------------------------------------------------- Memorial Web Site Script Multiple Arbitrary Delete Vuln ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com Where...

Memorial Web Site Script Multiple Arbitrary Delete Vulnerability

Exploit for php platform in category web applications ================================================================ Memorial Web Site Script Multiple Arbitrary Delete Vulnerability ================================================================ Author : Chip D3 Bi0s Email :...

Mandriva Update for mmc-agent MDVA-2010:050-1 (mmc-agent)

Check for the Version of mmc-agent OpenVAS Vulnerability Test Mandriva Update for mmc-agent MDVA-2010:050-1 mmc-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mandriva Update for mmc-agent MDVA-2010:050 (mmc-agent)

Check for the Version of mmc-agent OpenVAS Vulnerability Test Mandriva Update for mmc-agent MDVA-2010:050 mmc-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2008-3587

Cross-site scripting XSS vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject arbitrary web script or HTML via the r parameter...

CVE-2008-3587

The CVE-2008-3587 entry documents a Cross-site Scripting (XSS) vulnerability in the result.php page of Chris Bunting Homes 4 Sale, exploitable by supplying arbitrary web script or HTML via the r parameter. Affected software/URL entries point to a user-facing web application and the issue arises f...

Unfixed XSS vulnerability at www.dizaynhomes.com

Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.dizaynhomes.com, which at the time of submission ranked 10079212 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is...

homes4sale-xss.txt

Homes 4 Sale Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : Homes 4 Sale Download :...

Homes 4 Sale Remote XSS Vulnerabilitiy

Homes 4 Sale Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ o | My Email : [email protected] |/ / | Name Script : Homes 4 Sale Download :...

Homes 4 Sale - 'results.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30517/info Homes 4 Sale is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...