Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2014-7378

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
NVD
NVD
•added 2014/10/20 10:55 a.m.•25 views

CVE-2014-7507

The Hector Leal aka ad.hector.leal.com application 13/08/14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
•added 2014/10/20 10:55 a.m.•18 views

Information disclosure

The Hector Leal aka ad.hector.leal.com application 13/08/14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/20 10:00 a.m.•36 views

CVE-2014-7507

The Hector Leal aka ad.hector.leal.com application 13/08/14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/20 10:00 a.m.•42 views

CVE-2014-7507

CVE-2014-7507 affects the Hector Leal Android app (ad.hector.leal.com, compiled 13/08/14). The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. Public sources (NV...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2014/10/20 12:00 a.m.•3 views

PT-2014-8050

Name of the Vulnerable Software and Affected Versions Hector Leal aka ad.hector.leal.com application version 13/08/14 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verif...

5.4CVSS0.00266EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/20 12:00 a.m.•4 views

CVE-2014-7507: Undefined Security Weakness

The Hector Leal aka ad.hector.leal.com application 13/08/14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2008/10/25 12:00 a.m.•94 views

Count.cgi(wwwcount)远程缓冲区溢出漏洞

BugCVE: CVE-1999-0021 BUGTRAQ: 128 Count.cgi wwwcount是一个非常流行的Web站点跟踪统计CGI程序。一般它作为Web页面点击数统计。1997年10月,这个程序被发现了两个远程漏洞。第一个漏洞比较轻微,它能允许远程用户浏览到受限制的.GIF文件,可能泄漏.GIF文件里潜在的敏感数据。 第二个漏洞比较严重,count.cgi程序在处理QUERYSTRING环境变量的时候存在缓冲区溢出漏洞。远程攻击者可以发送一个超长的请求给程序就能进行溢出攻击,以Web用户的权限在系统执行任意命令。 2.3 Muhammad A. Muquit...

7.5CVSS6.6AI score0.2667EPSS
SaveExploits2
Rows per page
Query Builder