2340 matches found
CVE-2014-7443
The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...
Joomla Spider Form Maker <= 3.4 - SQLInjection
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '87285' version = '1' vulDate = '2014-09-07' author = 'anonymous' createDate =...
Joomla Spider Form Maker 3.4 SQL Injection
Exploit Title : Joomla Spider Form Maker = 3.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/products/joomla-form.html Dork Google: inurl:comformmaker Date : 2014-09-07 Tested on : Windows 7 / Mozilla Firefox Linux /...
Joomla Spider Form Maker <= 4.3 SQL Injection Vulnerability
Joomla Spider Form Maker versions 4.3 and below suffer from a remote SQL injection vulnerability. Exploit Title : Joomla Spider Form Maker = 4.3 SQLInjection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/products/joomla-form.html...
CVE-2014-5709
The Donut Maker aka com.sunstorm.android.donut application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5709
CVE-2014-5709 concerns the Android app Donut Maker (com.sunstorm.android.donut) version 1.27, which fails to verify X.509 certificates from SSL servers . This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected records ind...
CVE-2014-5709
The Donut Maker aka com.sunstorm.android.donut application 1.27 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5838
The CVE-2014-5838 entry concerns The Girls Games - Shoes Maker (com.g6677.android.shoemaker) on Android, version 1.0.1, which does not verify X.509 certificates from SSL servers. This lax TLS handling allows MITM attackers to spoof servers and potentially obtain sensitive information via a crafte...
WP App Maker 1.0.16.4 - icons-launcher.php uid Parameter Reflected XSS
The wp-app-maker WordPress plugin was affected by an icons-launcher.php uid Parameter Reflected XSS security vulnerability...
WordPress Form Maker Plugin <= 1.6.4 - Unspecified Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in frontendformmaker.php. Solution Update the plugin...
Form Maker 1.6.4 - front_end_form_maker.php Unspecified XSS
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by a frontendformmaker.php Unspecified XSS security vulnerability...
CVE-2014-4578
Cross-site scripting XSS vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
CVE-2014-4578
WP App Maker plugin for WordPress (versions
CVE-2014-4578
Cross-site scripting XSS vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter...
Windows Movie Maker 2.1.4026.0 - (.wav) Crash PoC
No description provided by source. Exploit Title: Windows Movie Maker Version 2.1.4026.0 .wav - Crash POC Date: 16-07-2013 Exploit Author: ariarat Vendor Homepage: http://www.microsoft.com Software Link: included in windows xp sp2 and sp3 Version: 2.1.4026.0 Tested on: Windows XP sp3 CVE :...
Magix Musik Maker 16 - .mmm Stack Buffer Overflow (without egg-hunter)
No description provided by source. --- My version of exploit... Looks like bug the same as in: http://www.exploit-db.com/exploits/17313/ My exploit does not use egg-hunter, so it must be faster, but i have limited size for payload - 750 bytes 8 Speed Vs Size... --- Title: Magix Musik Maker 16...
Xilisoft Blackberry Ring Tone Maker .wma Local Crash
No description provided by source. !/usr/bin/perl Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cost: 9.95 USD Author:...
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype=multipart/form-data Existing User:INPUT name=unamebr INPUT type=file name=userfile style=visibility:HIDDENbr INPUT type=hidden name=email [email protected] input type=hidden...