EUVD-2014-1901

Malware in sbrugna...

EUVD-2014-1900

Malware in sbrugna...

iThoughtsHD拒绝服务漏洞

CVE ID:CVE-2014-1828 iThoughtsHD是一款ios应用，属于思维导图软件。 iPad设备上使用的iThoughtsHD app 4.19 for iOS的iThoughts Web服务器存在安全漏洞，可使远程攻击者通过上传较大的文件造成拒绝服务。 0 iThoughtsHD iThoughtsHD 4.19 目前厂商还没有提供补丁或者升级程序： www.ithoughts.co.uk/...

iThoughtsHD任意文件上传漏洞

CVE ID:CVE-2014-1827 iThoughtsHD是一款ios应用，属于思维导图软件。 iPad设备上使用的iThoughtsHD app 4.19 for iOS，在启用了WiFi Transfer功能后，可使远程攻击者通过上传诸如.html%00.txt的文件，即在扩展名后加%00序列来达到上传任意文件的目的。 0 iThoughtsHD iThoughtsHD 4.19 目前厂商还没有提供补丁或者升级程序： www.ithoughts.co.uk/...

CVE-2014-1826

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

CVE-2014-1828

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

Design/Logic Flaw

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

Cross site scripting

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

Design/Logic Flaw

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

CVE-2014-1826

Cross-site scripting XSS vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name...

CVE-2014-1826

The CVE-2014-1826 entry concerns iThoughtsHD for iOS (iPad) version 4.19, where the WiFi Transfer feature allows cross-site scripting via a crafted map name. The vulnerability is an XSS in the map name handling, enabling remote attackers to inject arbitrary web script or HTML when the map name is...

CVE-2014-1827

The CVE-2014-1827 entry affects iThoughtsHD 4.19 for iOS on iPad, where enabling WiFi Transfer allows remote upload of arbitrary files by exploiting a null-byte (%00) injection after a dangerous extension (demonstrated with .html%00.txt). Affected component is the web upload interface; root cause...

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

CVE-2014-1828

The CVE-2014-1828 entry concerns iThoughtsHD for iOS (iPad), where the iThoughts web server component in version 4.19 exposes a Denial of Service risk via uploading large files. The observed impact is disk consumption leading to service disruption. The vulnerability details across connected sourc...

CVE-2014-1828

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...

PT-2014-4315

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19 Description The issue is related to a cross-site scripting XSS vulnerability. It occurs when the WiFi Transfer feature is used, allowing remote attackers to inject arbitrary web script or HTML via a crafted map nam...

PT-2014-4317

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19 Description The issue allows remote attackers to cause a denial of service by consuming disk space through uploading a large file. This is related to the iThoughts web server in the iThoughtsHD app on iPad devices...

PT-2014-4316

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19 Description The issue allows remote attackers to upload arbitrary files by exploiting the WiFi Transfer feature. This is achieved by placing a %00 sequence after a dangerous extension, as demonstrated by a...

CVE-2014-1828: Improper Input Validation

The iThoughts web server in the iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to cause a denial of service disk consumption by uploading a large file...