Design/Logic Flaw

The Shop Love aka com.waterwish.shoplove application 1.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5733

The Shop Love aka com.waterwish.shoplove application 1.05 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5733

The CVE-2014-5733 entry targets the Android application “Shop Love” (package com.waterwish.shoplove) version 1.05. The vulnerability is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...

CVE-2014-5614

The Love Collage - Photo Editor aka com.etoolkit.lovecollage application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Love Collage - Photo Editor aka com.etoolkit.lovecollage application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5614

The CVE-2014-5614 entry documents a vulnerability in The Love Collage - Photo Editor (com.etoolkit.lovecollage) for Android 1.3, where SSL certificate validation is not performed. This lack of X.509 validation enables MITM attackers to spoof servers and potentially obtain sensitive information vi...

FoeCMS Multiple Vulnerabilities

FoeCMS suffers from cross site scripting, open redirect, and remote SQL injection vulnerabilities. Exploit Title : FoeCMS multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://foecms.com/ Download Link : https://github.com/themarioga/FoeCMS/archive/master.zip Date : 05/07/2014...

Joomla Component Love Factory com_lovefactory Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author...

British Man Indicted for Hacking U.S. Governement

The United States District Court in New Jersey is accusing British citizen Lauri Love, and others not named, of conspiring to and illegally accessing various government and military networks. The purpose of these attacks, prosecutors said, was to steal vast stores of personally identifiable and...

WordPress I Love It Theme <= 1.9 Multiple Vulnerabilities - Active Check

The WordPress theme SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cosmothemes:iloveit"; ifdescription...

WordPress I Love It XSS / Content Spoofing / Path Disclosure

Hello list! These are Cross-Site Scripting, Content Spoofing and Full path disclosure vulnerabilities in I Love It theme for WordPress. This is commercial premium theme. ------------------------- Affected products: ------------------------- All versions of I Love It theme for WordPress. The theme...

URL Shortener Script 1.0 - SQL Injection

URL Shortener Script 1.0 - SQL Injection =================================================================================== url shortener script 1.0 sql injection Vulnerabilities =================================================================================== Exploit Title: url shortener scri...

CVE-2010-1957

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1957

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1957

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1957

CVE-2010-1957 affects Joomla! component Love Factory (com_lovefactory) 1.3.4. A directory traversal flaw allows remote attackers to read arbitrary files by injecting a .. in the controller parameter to index.php, resulting in potential unauthorized file access. The Nuclei template confirms this a...

Joomla Love Factory 1.3.4 Local File Inclusion

================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

Joomla! Component Love Factory 1.3.4 - Local File Inclusion ================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor :...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...