PT-2014-7980

Name of the Vulnerable Software and Affected Versions The PokeCreator Lite aka com.pokecreator.builderlite version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-7419: Undefined Security Weakness

The PokeCreator Lite aka com.pokecreator.builderlite application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6722

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The CVE-2014-6720 entry concerns the Android app Pesca de Carpa Lite (com.clearfishing.pescadecarpa.lite) version 1.0, which fails to verify X.509 certificates when connecting to SSL servers. This undermines TLS trust and enables man-in-the-middle attackers to spoof the SSL server and access sens...

CVE-2014-6722

The CVE-2014-6722 entry affects the Android app “Pescuit Crap Lite” (ro.aventurilapescui.pescuitcrap.lite), version 1.0. The vulnerability stems from the app not verifying X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and obtain sensitive ...

PT-2014-7400

Name of the Vulnerable Software and Affected Versions The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not...

PT-2014-7398

Name of the Vulnerable Software and Affected Versions Pesca de Carpa Lite version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...

CVE-2014-6722: Undefined Security Weakness

The Pescuit Crap Lite aka ro.aventurilapescui.pescuitcrap.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720: Undefined Security Weakness

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

ActualAnalyzer Lite 2.81 /aa.php 命令执行漏洞

No description provided by source...

WordPress Theme Celestial-Lite Arbitrary File Download Vulnerability

WordPress Theme celestial-lite suffers from Arbitrary File Download Vulnerability. POC :http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/celestial-lite Demo :...

Smartcard Undocumented Commands: THC-SmartBrute

This tools finds undocumented and secret commands implemented in a smartcard. An instruction is divided into Class CLA, Instruction-Number INS and the parameters or arguments P1, P2, P3. … iterates through all the possible values of CLA and INS to find a valid combination. Furthermore it tries to...

CVE-2014-5696

The Sonic 4 Episode II LITE aka com.sega.sonic4ep2lite application 2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...