CVE-2014-6920: Undefined Security Weakness

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-1986

Name of the Vulnerable Software and Affected Versions Vivint Sky Control Panel version 1.1.1.9926 Description The issue is related to the lack of authentication for critical functions in the Vivint Sky Control Panel web application. This allows a remote attacker to enable and disable the alarm...

PT-2014-6959

Name of the Vulnerable Software and Affected Versions PSECU Mobile+ application version 2.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

CVE-2014-5930: Undefined Security Weakness

The Store and Share aka sg.com.singnet.mystorage.android application 2.0.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-3655

Name of the Vulnerable Software and Affected Versions APT versions prior to 1.0.9 Description The issue allows remote attackers to execute arbitrary code via a crafted package when the Acquire::GzipIndexes option is enabled, due to a lack of checksum validation. Recommendations For versions prior...

PT-2014-6886

Name of the Vulnerable Software and Affected Versions The Beauty Bible - App for Girls aka com.my.beauty.bible application version 5 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

PT-2014-6824

Name of the Vulnerable Software and Affected Versions Acces Compte com.fullsix.android.labanquepostale.accountaccess version 3.2.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not veri...

CVE-2014-5582: Undefined Security Weakness

The Ingress Intel Helper aka com.bb.ingressintel application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6808

Name of the Vulnerable Software and Affected Versions The Cleaner - Speed up & Clean aka com.liquidum.thecleaner version 1.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not veri...

PT-2014-6707

Name of the Vulnerable Software and Affected Versions SwiftKey Keyboard + Emoji version 5.0.2.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

PT-2014-4665

Name of the Vulnerable Software and Affected Versions Sensys Networks VSN240-F and VSN240-T sensors VDS versions prior to 2.10.1 Sensys Networks TrafficDOT versions prior to 2.10.3 Description The issue allows remote attackers to interfere with traffic control by replaying transmissions on a...

PT-2014-1770

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 2.0 Description The issue allows remote attackers to obtain sensitive information due to a lack of permission checks on files in the web interface. Multiple vulnerabilities in the CUPS package may lead to a breach of...

CA ERwin Web Portal ConfigServiceProvider Remote File Creation (CVE-2014-2210)

A remote file creation/overwrite vulnerability exists in CA ERwin Web Portal. This vulnerability is due to lack of authentication and insufficient input validation in the ConfigServiceProvider servlet when processing HTTP requests. By sending crafted HTTP requests to the target system, a remote...

Verity Search97 2.1 Security Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/162/info A pair of vulnerabilities exist in Verity's Search97 web interface to the Verity search engine. The first vulnerability is due to cgi-bin scripts, s97cgi and s97rcgi failing to check for the existence of certain...

Twilight WebServer 1.3.3 .0 GET Request Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8181/info It has been reported that Twilight WebServer may be prone to a remote buffer overflow vulnerability. The problem may be present due to a lack of bounds checking performed on incoming GET requests. Arbitrary code...

Objectivity/DB Lack of Authentication Remote Exploit

No description provided by source. !/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is...

Zimplit CMS 3.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Zimplit CMS multiple vulnerabilities Date: 2013 13 September Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: www.zimplit.com Tested on: Linux & Windows, PHP 5.3....

PT-2014-4426

Name of the Vulnerable Software and Affected Versions Sophos Disk Encryption SDE versions 5.x Sophos Enterprise Console SEC versions 5.x through 5.2.1 Description The issue concerns a lack of enforcement of intended authentication requirements when resuming from sleep mode. This allows physically...

PT-2014-1779

Name of the Vulnerable Software and Affected Versions apt versions prior to 1.0.4 Description The issue concerns multiple vulnerabilities in the apt package of the Debian GNU/Linux operating system, which can be exploited to compromise the integrity and availability of protected information. Thes...

FreeBSD : libxml2 -- lack of end-of-document check DoS (e7bb3885-da40-11e3-9ecb-2c4138874f7d)

CVE MITRE reports : parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...