55 matches found
Information disclosure
The Halftime Magazine aka com.magzter.halftimemagazine application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Threat Outbreak Alert RuleID12041: Email Messages Distributing Malicious Software on October 20, 2014
Medium Alert ID: 36149 First Published: 2014 October 20 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12041 may contain the following files: Name |...
CVE-2014-7469
The Best Beginning aka com.bbbeta application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Threat Outbreak Alert RuleID11654: Email Messages Distributing Malicious Software on September 22, 2014
Medium Alert ID: 35800 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11654 may contain the following files: Name ...
CVE-2014-3251
The MCollective aessecurity plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to establish unauthorized Mcollective connections via unspecified vectors related to...
Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification
Binary data 5993.prm...
CVE-2009-0642
ext/openssl/osslocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSPbasicverify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate...
Akamai Download Manager < 2.2.3.7 ActiveX Remote Download Exploit
Exploit for unknown platform in category remote exploits ================================================================= Akamai Download Manager Download Manager window.resizeTo500,510; var bDocReady = false; var bInsObj = false; var isLinux = navigator.userAgent.indexOf"Linux" = 0; var isMacFF...
CVE-2006-5913
Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...
CVE-2006-5913
CVE-2006-5913 affects Microsoft Internet Explorer 7. The issue allows remote attackers to cause a secure-site certificate to appear invalid by triggering links to res://ieframe.dll/sslnavcancel.htm (anchor contains target URL) or to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805; the ...
CVE-2006-5913
Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...
CVE-2006-5805
Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to repo...
CVE-2006-5805
Microsoft Internet Explorer 7 contains a vulnerability in the handling of links to res://ieframe.dll/invalidcert.htm that can cause the browser to display the URL of a secure site in the address bar while reporting the certificate as invalid. The attack vector is a crafted link that redirects to ...
Проблемы с Java Plugin 1.4 (file reading)
Апплеты не имеющие корректного сертификата тем не менее могут обращаться к файловой системе...
ROS-2-3373
2.3373 Notification on the update of the Red OS OPERATIONAL SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...