12520 matches found
CVE-2014-6907
The Rakuten Install aka co.jp.rakuten.installapp application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Rakuten Install aka co.jp.rakuten.installapp application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6907
The Rakuten Install aka co.jp.rakuten.installapp application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6907
The CVE-2014-6907 entry covers the Rakuten Install (co.jp.rakuten.installapp) Android app v1.5.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Public ...
CVE-2014-6907: Undefined Security Weakness
The Rakuten Install aka co.jp.rakuten.installapp application 1.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7583
Name of the Vulnerable Software and Affected Versions Rakuten Install aka co.jp.rakuten.installapp version 1.5.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
Fedora Update for kdebindings FEDORA-2014-11448
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2014-5851
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description A directory traversal issue exists in the App Installation feature, allowing local users to install unverified apps. This is achieved by triggering code-signature validation of an unintended bundle...
ThinkSAAS 2.2 GET型CSRF到Getshell
简要描述： 后台Getshell本想在XSS漏洞里一起提交的。。。结果我给忘了。 不过后来发现这个洞是Get型的CSRF，利用方便，老少咸宜，在社区CMS中可以说威力无限呀。 详细说明： /app/system/action/plugin.php 83行： case "delete": $apps = $GET'apps'; $pname = $GET'pname'; delDir'plugins/'.$apps.'/'.$pname; qiMsg'删除成功！'; break; 获得了GET到的值以后拼接成路径以后传入delDir函数。delDir函数： / 删除文件夹和文件夹下所有的文...
CVE-2014-5106
The CVE-2014-5106 entry describes a cross-site scripting (XSS) vulnerability in Invision Power IP.Board (IPB) 3.4.x through 3.4.6. An attacker could inject arbitrary web script or HTML via the HTTP Referer header to admin/install/index.php. This applies to IPB 3.4.x–3.4.6; no exploitation details...
[SECURITY] Fedora 20 Update: cobbler-2.6.3-1.fc20
Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...
[SECURITY] Fedora 19 Update: cobbler-2.6.3-1.fc19
Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...
CVE-2014-5106: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Invision Power IP.Board aka IPB or Power Board 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to admin/install/index.php...
PT-2014-6283
Name of the Vulnerable Software and Affected Versions Invision Power IP.Board versions 3.4.x through 3.4.6 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to the...
CVE-2014-4226
Unspecified vulnerability in the PeopleSoft Enterprise FIN Install component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2014-4226: Undefined Security Weakness
Unspecified vulnerability in the PeopleSoft Enterprise FIN Install component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
Fedora Update for seamonkey FEDORA-2014-7682
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2019-6869
Name of the Vulnerable Software and Affected Versions autojump versions prior to 21.5.8 Description The issue allows local users to gain privileges via a Trojan horse custom install directory in the current working directory. Recommendations For versions prior to 21.5.8, update to version 21.5.8 ...
HP Data Protector CMD Install Service Vulnerability (msf)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ Exploit Title: HP Data Protector Client...
FAQMasterFlex 1.2 - SQL Injection Vulnerability
No description provided by source. Hi guys, I just found a sqli bug on FAQMasterFlex. Since the software used as one of Fantastico auto-install software package in F.A.Q software section. Author: cyb3r.anbu Software Link: http://www.lethalpenguin.net/design/faqmasterflex.php Version: 1.2 Tested o...