PT-2017-2995

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.7.0E through 3.7.5E Description The issue is related to insufficient validation of HTTP requests in the web-based GUI of Cisco IOS XE Software for Wireless LAN Controllers. This could allow a remote attacker,...

Beware of Skimming Devices Installed on the ATM Vestibule Doors

Despite anti-skimmer ATM Lobby access control system available in the market, we have seen a number of incidents in recent years where criminals used card skimmers at ATM doors. Few years back, cyber criminals started using card skimmers on the door of the ATM vestibule, where customers have to...

CVE-2014-5829

The Hobby Lobby Stores aka com.hobbylobbystores.android application 2.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hobby Lobby Stores aka com.hobbylobbystores.android application 2.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5829

The Hobby Lobby Stores aka com.hobbylobbystores.android application 2.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5829

CVE-2014-5829 affects the Hobby Lobby Stores Android app (package com.hobbylobbystores.android) version 2.1.9, where SSL/TLS server certificates are not verified. This weakness allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate, compromising confiden...

CVE-2014-5829: Undefined Security Weakness

The Hobby Lobby Stores aka com.hobbylobbystores.android application 2.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Impressions Games Lords of the Realm III Nickname Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server. The problem is in the handling of...

UFO: Alien Invasion 2.2.1 - BoF Exploit (Win7 ASLR and DEP Bypass)

No description provided by source. !/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: UFO: Alien Invasi...

Design/Logic Flaw

The Web Administrator Interface on Cisco Wireless LAN Controller WLC devices allows remote authenticated users to cause a denial of service device crash by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request...

CVE-2013-3474

The Web Administrator Interface on Cisco Wireless LAN Controller WLC devices allows remote authenticated users to cause a denial of service device crash by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request...

PT-2013-4424

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices affected versions not specified Description A denial of service condition can be caused by remote authenticated users who are members of the Full Manager, Read Only, or Lobby Ambassador managers group ...

UFO: Alien Invasion 2.2.1 (Windows 7) - Remote Buffer Overflow (ASLR + DEP Bypass)

!/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: "UFO: Alien Invasion 2.2.1 x86 Apr 28 2008 Win32...

UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)

Exploit for windows platform in category remote exploits ================================================================= UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass ================================================================= !/usr/bin/python Exploit Title: UFO: Alien...

GlobalLink glitemflat.dll SetClientInfo() overflow analysis-vulnerability warning-the black bar safety net

Affected version: Lianzhong game lobby 2. 7. 0. 8 2 0 0 7 years 8 months 1 6, released Unaffected version: Ourgame also didn't fill :- Brief analysis: Prior to the PoC code: OBJECT id=target classid=clsid:7D1425D4-E2FC-4A52-BDA9-B9DCAC5EF574/OBJECT SCRIPT...

Lianzhong game lobby GlobalLink glItemCom.dll SetInfo()use analyze-vulnerability warning-the black bar safety net

author: voidph4nt0m.org pub: 2008-09-04 http://www.ph4nt0m.org Text Mode Affected version: Lianzhong game lobby 2. 7. 0. 8 2 0 0 7 years 8 months 1 6, released Unaffected version: Ourgame also didn't fill :- Genesis: With all the programmers are too trusting user input,not detecting the user...

CVE-2006-5446

SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...

CVE-2006-5446: Undefined Security Weakness

SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...

CVE-2004-2165

Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...

CVE-2004-2165: Undefined Security Weakness

Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...