CVE-2014-5788

The Ninja Chicken Adventure Island aka mominis.GenericAndroid.NinjaChickenAdventureIsland application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5787

The Ninja Chicken aka mominis.GenericAndroid.NinjaChicken application 1.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5789

CVE-2014-5789 affects the Android app “Ninja Chicken Ooga Booga” (version 1.4.2). The root cause is that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attacks to spoof servers and expose sensitive information via a crafted certificate. The publi...

CVE-2014-5789

The Ninja Chicken Ooga Booga aka mominis.GenericAndroid.NinjaChickenOogaBooga application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5788

CVE-2014-5788 affects the Android app Ninja Chicken Adventure Island (aka mominis.Generic_Android.Ninja_Chicken_Adventure_Island) version 1.1.1. The flaw is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive d...

CVE-2014-5787

CVE-2014-5787 affects the Ninja Chicken Android app (version 1.7.6). The issue is that the application does not verify X.509 certificates when connecting to SSL servers, which can allow MITM attackers to spoof servers and access sensitive information via a crafted certificate. This is based on th...

WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass

WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass source: https://www.securityfocus.com/bid/69740/info The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthoriz...

WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass

source: https://www.securityfocus.com/bid/69740/info The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Ninj...

WordPress Ninja Forms Plugin - Authorization Bypass

Ninja Forms plugin is prone to an authorization BYPASS vulnerability that allows an attacker to bypass security restrictions and perform unauthorized actions. Solution Update the plugin...

Conversion Ninja - /lp/index.php id Parameter XSS

The conversionninja WordPress plugin was affected by a /lp/index.php id Parameter XSS security vulnerability...

ColdBookmarks 1.22 SQL Injection Vulnerability

No description provided by source. ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

Ninja Blog 4.8 - Multiple Vulnerabilities

No description provided by source...

Ninja RSS Syndicator 1.0.8 - Local File Include

No description provided by source. Joomla component Ninja RSS Syndicator 1.0.8 Local File Include Version : 1.0.8 Author : jdc Download : http://ninjaforge.com/index.php?option=comninjacentral&page=showpackage&id=74&Itemid=236...

Ninja Blog 4.8 - Remote Information Disclosure Vulnerability

No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alt...

SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit

No description provided by source. / surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team...

CVE-2014-4017

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php...

CVE-2014-4017

CVE-2014-4017 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Conversion Ninja . The flaw allows remote attackers to inject arbitrary script or HTML by supplying a crafted value to the id parameter of lp/index.php . Multiple connected sources confirm this is an XSS issue in ...

WordPress Conversion Ninja Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter to lp/index.php. Solution Update the plugin...

WordPress Conversion Ninja 'id' Parameter Cross Site Scripting Vulnerability

WordPress Conversion Ninja Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...