INSIDE Secure MatrixSSL Information Disclosure Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. An information disclosure vulnerability exists in versions of INSIDE Secure MatrixSSL prior to 3.8.3, which can be exploited by an attacker to conduct a...

DEBIAN-CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

RTL INSIDE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RTL INSIDE published at the 'play' market has multiple vulnerabilities...

Ashley Madison Hacker – An Insider Woman Employee?

"Ashley Madison was not hacked!" This is what declared by John McAfee, former founder of antivirus software company McAfee. So far everyone must be aware of Ashley Madison massive data breach. Last week, the hackers, who called themselves Impact Team, posted 10GB of personal data for tens of...

CVE-2014-6669

CVE-2014-6669 affects the Android app “Inside Crochet” (package com.magazinecloner.insidecrochet). The provided documents state that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce...

CVE-2014-6669: Undefined Security Weakness

The Inside Crochet aka com.magazinecloner.insidecrochet application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The CVE-2014-5677 entry affects the Point Inside Shopping & Travel Android app (com.pointinside.android.app) version 3.1.0, where the SSL/TLS implementation does not verify X.509 certificates. According to the description, this improper certificate validation enables man-in-the-middle attackers t...

CVE-2014-5677: Undefined Security Weakness

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6662

Name of the Vulnerable Software and Affected Versions The Point Inside Shopping & Travel aka com.pointinside.android.app version 3.1.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive...

kernel: powerpc: tm: crash when forking inside a transaction

A flaw was found in the way the Linux kernel performed forking inside of a transaction. A local, unprivileged user on a PowerPC system that supports transactional memory could use this flaw to crash the system...

RHEL 6 : MRG (RHSA-2013:0829)

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Calendarix 0.8.20071118 - SQL Injection

No description provided by source. Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : inurl:calday.php?op=day&catview= Solution : Updat...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:0744 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

Unfixed XSS vulnerability at www.insidefutures.com

Security researcher aSUaBANG, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.insidefutures.com, which at the time of submission ranked 259142 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

vBulletin 4.0.4 Code Execution

/======================================================================\ || || || Vurnerebility vBulletin - http://www.vbulletin.org || || Local or adserver Javascript,forumdisplay.php" Code Execution || || Version license 4.0.4 || || info set cookies, error issue & critical-information-disclosur...

ShortCMS 1.2.0 SQL Injection

Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in printView page of News . : :::I...

Calendarix v0.8.20071118 SQL Injection

Exploit for unknown platform in category web applications ====================================== Calendarix v0.8.20071118 SQL Injection ====================================== Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et http://vulnWebSite/calday.php?op=day&catview=-2...

ShortCMS 1.2.0 - SQL Injection

ShortCMS 1.2.0 - SQL Injection Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in...