CVE-2014-7999: Undefined Security Weakness

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00478565...

CVE-2014-7994: Improper Input Validation

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to an unspecified HTTP handler on the local network, aka Cisco-Meraki defect ID...

CVE-2014-7993: Exposure of Sensitive Information to an Unauthorized Actor

Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on the local network, aka Cisco-Meraki defect ID 00302012...

PT-2014-8366

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and a per-device secret, and sending a request to ...

PT-2014-8371

Name of the Vulnerable Software and Affected Versions Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 Description The issue allows remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on the local network. Recommendations For...

CVE-2014-7593

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7593

CVE-2014-7593 affects the Android app “The Mr Whippet – Yorkshire Ice” (aka com.appytimes.ice), version 1.1. The vulnerability is a failure to verify X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. ...

CVE-2014-7593: Undefined Security Weakness

The Mr Whippet - Yorkshire Ice aka com.appytimes.ice application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Mr.Sausage aka com.appmrsausage.layout application 1.301 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Buffer overflow

Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service crash via a long string in the URI in a GET request...

CVE-2014-4927

Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service crash via a long string in the URI in a GET request...

PT-2014-6212 · NetGear +2 · Netgear Mr-Adsl-Dg834 +4

Name of the Vulnerable Software and Affected Versions: ACME micro httpd versions affected versions not specified D-Link DSL2750U affected versions not specified D-Link DSL2740U affected versions not specified NetGear WGR614 affected versions not specified NetGear MR-ADSL-DG834 affected versions n...

CVE-2014-4927: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service crash via a long string in the URI in a GET request...

ACME micro_httpd - Denial of Service

Exploit for linux platform in category dos / poc """ Exploit Title: Buffer Overflow in microhttpd by ACME Date: 4/7/2014 Exploit Author: Yuval tisf Nativ Vendor Homepage: http://www.acme.com/software/microhttpd/ Software Link: http://www.acme.com/software/microhttpd/ Version: June 2012 CVE:...

ACME micro_httpd - Denial of Service

""" Exploit Title: Buffer Overflow in microhttpd by ACME Date: 4/7/2014 Exploit Author: Yuval tisf Nativ Vendor Homepage: http://www.acme.com/software/microhttpd/ Software Link: http://www.acme.com/software/microhttpd/ Version: June 2012 CVE: CVE-2014-4927 Tested on: D-Link: DSL2750U, DSL2740U,...

PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) RFI Vulnerability

No description provided by source. Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powered by phpMyDesktop|arcade v1.0...

Soco CMS Local File Include Vulnerability

No description provided by source. Exploit Title: Soco CMS Local File Include Google Dork: Powered by Soco Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

Kloxo-MR 6.5.0 - CSRF Vulnerability

No description provided by source. Exploit Title :Kloxo-MR 6.5.0 CSRF Vulnerability Vendor Homepage :https://github.com/mustafaramadhan/kloxo/tree/dev Version :Kloxo-MR 6.5.0.f-2014020301 Tested on :Centos 6.4 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com...

Kloxo-MR跨站请求伪造漏洞

Kloxo是一款免费的虚拟主机管理系统。Kloxo-MR是Kloxo的特别版。 由于应用程序允许用户通过未经验证的HTTP请求执行某些操作，攻击者可以利用漏洞当登陆的管理员访问特制网页时添加用户。 0 Kloxo-MR 6.x Kloxo 6.5.1.b-2014041204版本已修复此漏洞，建议用户下载使用： https://github.com/mustafaramadhan/kloxo html headtitleKloxo-MR demo/title/head script type="text/javascript" function yurudi...