Volvo Ocean Race 2014-15 - Customized SSL, GPL license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Volvo Ocean Race 2014-15 published at the 'play' market has multiple vulnerabilities...

Directory Traversal Vulnerability in Broadband Authentication and Billing System of Chengdu Starry Blue Ocean Network Technology Co.

Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. A directory traversal vulnerability exists in the broadband authentication and billing system of Chengdu Starry Blue Ocean Network Technology Co. where an attacker can download sensitive...

Universal Password Login Vulnerability in NatShell Blue Ocean Premier User Self-Service System

Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. A universal password login vulnerability exists in the NatShell Blue Ocean Excellence User Self-Service System, which can be exploited by an attacker to login to the system and view...

alettaoceanempire.com XSS vulnerability

Vulnerable URL: http://alettaoceanempire.com/search/?searchField=anal%3C/div%3E%3Cvideo/poster/onerror=alert%28%27XSSposed%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:25 GMT Vulnerability type:| XSS Vulnerability status:| Public...

Threat Outbreak Alert RuleID13331: Email Messages Distributing Malicious Software on January 29, 2015

Medium Alert ID: 37225 First Published: 2015 January 29 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13331 may contain the following files: Name |...

CVE-2014-7047

The Ocean Avenue Mobile Pro aka com.oceanavenue.mobile application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Ocean Avenue Mobile Pro aka com.oceanavenue.mobile application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7047

The CVE-2014-7047 entry concerns the Ocean Avenue Mobile Pro Android app (com.oceanavenue.mobile) version 2.0, which does not verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The ...

CVE-2014-7047

The Ocean Avenue Mobile Pro aka com.oceanavenue.mobile application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apache Libcloud Digital Ocean API本地信息泄露漏洞

BUGTRAQ ID: 64617 CVECAN ID: CVE-2013-6480 libcloud 是用Python开发的访问云计算服务的统一接口。 Apache Libcloud 0.12.3-0.13.2版本销毁DigitalOcean节点时，没有发送scrubdata query参数，这可使本地攻击者利用此漏洞获取敏感信息。 0 Apache Group Libcloud 0.12.3 - 0.13.3 厂商补丁： Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apache Libcloud Digital Ocean API - Local Information Disclosure

source: https://www.securityfocus.com/bid/64617/info Apache Libcloud is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks. Apache Libcloud versions 0.12.3 through 0.13.2 a...

Apache Libcloud Digital Ocean API - Local Information Disclosure

Apache Libcloud Digital Ocean API - Local Information Disclosure source: https://www.securityfocus.com/bid/64617/info Apache Libcloud is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to...

Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities

Overview Independent researchers Billy Rios and Terry McCorkle identified cross-site scripting XSS and write access violation vulnerabilities in Ocean Data Systems Dream Report application. ICS-CERT has coordinated these vulnerabilities with Ocean Data Systems, which has produced a new version th...

CVE-2011-4038

Cross-site scripting XSS vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Code injection

Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."...

CVE-2011-4038

The CVE-2011-4038 issue is an XSS vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report prior to 4.0 and other products. The vulnerability arises from lack of proper validation of certain parameters, allowing remote attackers to inj...

CVE-2011-4039

CVE-2011-4039 affects Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report prior to 4.0, with a write access violation that can execute arbitrary code. Exploitation requires user action (opening a specially crafted file) and is not fully remote; XS...

CVE-2011-4039

Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."...

Ocean CMS 0.0.2 Remote File Inclusion Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Ocean CMS 0.0.2 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...