EUVD-2014-5840

Malware in sbrugna...

Fiyo CMS 2.0.6.1 Privilege Escalation Vulnerability

Fiyo CMS version 2.0.6.1 suffers from a privilege escalation vulnerability due to poor design with trusting the client to tell the server a user's role. Exploit Title: Privilege Escalation Manipulation of User Group Vulnerability on Fiyo CMS 2.0.6.1 Google Dork: no Date: 11-03-2017 Exploit Author...

CVE-2014-5953

The KASKUS aka com.kaskus.android application 2.13.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The KASKUS aka com.kaskus.android application 2.13.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5953

The KASKUS aka com.kaskus.android application 2.13.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5953

The CVE-2014-5953 entry concerns the KASKUS Android app (com.kaskus.android) version 2.13.0. The vulnerability is an SSL/TLS validation flaw where the app does not verify X.509 certificates from servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive information via a...