463 matches found
CVE-2014-5983
The CVE-2014-5983 entry concerns the Android app Threadflip: Buy, Sell Fashion (com.threadflip.android) version 1.1.11, which does not verify X.509 certificates from SSL servers. The underlying issue is a lack of certificate validation, enabling man-in-the-middle attackers to spoof servers and ob...
CVE-2014-5983: Undefined Security Weakness
The Threadflip : Buy, Sell Fashion aka com.threadflip.android application 1.1.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5577
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5577
AVON Buy & Sell (com.AVONBeautyntheRep) Android app version 0.3 is affected by an SSL certificate validation flaw: it does not verify X.509 server certificates, enabling MITM with crafted certs. Root cause: missing/improper SSL certificate validation in the app’s network stack. CVSSv2 base score ...
CVE-2014-5577
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5577: Undefined Security Weakness
The AVON Buy & Sell aka com.AVONBeautyntheRep application 0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PHP-Nuke Sell Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27980/info The 'Sell' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Banner Management Script SQL Injection
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Banner Management Script SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:59$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...
LinkedIn Hack Tool Exposes Users' Emails without Exploiting Any Vulnerability
A Free Chrome, Firefox and Safari web browser plugin floating around the web, called 'Sell Hack' allows users to view the hidden email address of any LinkedIn user, means anyone can grab email addresses that we use for professional purposes. When installed, the 'Sell Hack' plugin will pop up a...
LinkedIn Sends Cease-and-Desist to Sell Hack Plug-In Maker
UPDATE: The makers of the controversial Sell Hack browser plug-in responded this afternoon to a cease-and-desist order from LinkedIn and confirmed their extension no longer works on LinkedIn pages and that all of the publicly visible data it had processed from LinkedIn profiles has been deleted...
Beat Websites Blind Sql Injection Vulnerability
Exploit for php platform in category web applications .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Beat Websites .:. Version : 1.0 .:. Download Script: http://beatwebsites.com/ .:. .:. Information Script: .:. You to Can Make Money Running Your Own Beat Website and Keep 100...
DiscuzX1. 5+ prop of the brush sub-vulnerability-vulnerability warning-the black bar safety net
If the user group set up"to purchase items a discount"option to buy when the price is discounted price, and sell when the price is not discounted price. That is the time to buy discount, sell when it is the original price. Buy: $magic'discountprice' = $G'group''magicsdiscount' ? intval$magic'pric...
10 Lessons learnt from Kim Dotcom
10 Lessons learnt from Kim Dotcom Article Cross Post from InternetServices. Kim Dotcom, a hacker that was able to take his knowledge and create a site called Megaupload, was recently arrested due to alleged copyright infringement allegations. Even though he was the top dog in the company, he did...
PHPAuctionSystem PHP Code Execution
====================================================== PHPAuctionSystem Upload Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...
Sell@Site PHP Online Jobs Login - Multiple SQL Injections
Sell@Site PHP Online Jobs Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/40869/info Sell@Site PHP Online Jobs is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting thes...
Sell@Site PHP Online Jobs Login - Multiple SQL Injections
source: https://www.securityfocus.com/bid/40869/info Sell@Site PHP Online Jobs is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
PHP-IPNMonitor - 'maincat_id' SQL Injection
SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit = -null+union+select+concatusername,0x3a,userpassword+from+ipntblpasswords-- + Example + :...
PHP-IPNMonitor - maincat_id SQL Injection
PHP-IPNMonitor - maincatid SQL Injection + + SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit =...
Php Nuke "Sell" module SQL Injection ("cid")
Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------------------------------------------------ Shoutz: Aura, imm02tal, Kinglet, iM4n Php Nuke "Sell" module SQL Injection "cid"...