CVE-2014-7034

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7034

The Senator Inn & Spa aka com.conduit.appcc06e8e9659c4cf7b361ad0b7717f3a4.app application 1.2.2.160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7034

CVE-2014-7034 affects the Android application of The Senator Inn & Spa (package com.conduit.app_cc06e8e9659c4cf7b361ad0b7717f3a4.app) version 1.2.2.160. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and...

Apple QuickTime 7.7.2 Targa image Buffer Overflow

No description provided by source. Application : Apple QuickTime Versions : = before 7.7.3 CVE : 2012-3755 Impact : 9.3 High References : http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html Auther : Senator of Pirates E-Mail : SenatorofPirates.teamatgmail.com FaceBook :...

Norwich University Receives $9.9 M for Cybersecurity Research

Norwich University, a small military college nestled in the Green Mountains of Vermont, secured another round of funding for cybersecurity research this week. The grant, $9.9 million in federal funds, will feed into a project that ensures groups in the private and public sector can better plan fo...

Hackers deface Philippines Department of Environment website

Hackers incensed by the Philippines' controversial cybercrime law have attacked government sites that deliver emergency information during natural disasters. The website of the Department of Environment and Natural Resources DENR was hacked on Saturday, despite calls from Malacañang for a...

Media player Classic .MPEG4 Heap overflow Vulnerability

Exploit for windows platform in category remote exploits Title : Media player Classic .MPEG4 Heap overflow Vulnerability Auther : Senator of Pirates Khalil Zhani FaceBook : /SenatorofPiratesInfo E-Mail : Senator.of.Pirates.teamatgmail.com Greeting : To my best friend Mr. Marshal Webb bug : ---- T...

CAS Modbus RTU Parser Buffer Overflow Exploit

Exploit for windows platform in category local exploits hello, nice to meet u A few day ago, Senator of Pirates published CAS Modbus RTU Parser Buffer Overflow PoC code, so i try to make Exploit Code, This is Exploit Title: CAS Modbus RTU Parser Buffer Overflow Exploit Date: 2012,09,07 Author:...

CAS Modbus RTU Parser Buffer Overflow SEH (PoC)

Exploit for windows platform in category dos / poc Title : CAS Modbus RTU Parser Buffer Overflow SEH PoC Author : Senator of Pirates Founder : Marshal Webb Link Software : http://www.chipkin.com/technical-resources/cas-modbus-rtu-parser/ FaceBook : /SenatorofPiratesInfo Marshal's FaceBook :...

Internet Explorer MSXML Uninitialized Memory (MS12-043)

Exploit for windows platform in category remote exploits Title : Internet Explorer MSXML Uninitialized Memory MS12-043 Date : 2012-09-01 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates : /SenatorofPiratesInfo Greetz : i greet to my best friends and every Moroccan...

Senator Seeks More Info On DOJ Location Tracking Practices

Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...

Nokia CP Suite Video Manager 7.1.180.64 Denial Of Service

Application : Nokia PC Suite Video Manager DoS Versions : = 7.1.180.64 Date : Friday, April 27,2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Greetz : i greet to my best friends and every moroccan PoC : ----- Data =...

Nokia PC Suite Video Manager 7.1.180.64 - '.mp4' Denial of Service

Application : Nokia PC Suite Video Manager DoS Versions : = 7.1.180.64 Date : Friday, April 27,2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Greetz : i greet to my best friends and every moroccan PoC : ----- Data =...

VLC Media Player除零拒绝服务漏洞

BUGTRAQ ID: 53169 VLC Media Player是多媒体播放器（最初命名为VideoLAN客户端）是VideoLAN计划的多媒体播放器。 VLC Media Player在处理畸形.mp4文件时，在实现上存在拒绝服务漏洞，攻击者可利用此漏洞使受影响应用崩溃。 0 VLC Media Player 2.0.1 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ Senator （）提供了如下测试方法： Data =...

Iran Replicating Captured U.S. Drone RQ-170 Sentinel

Iran Replicating Captured U.S. Drone RQ-170 Sentinel Iranian military aerospace chief General Amir Ali Hajizadeh was quoted having said:"The Americans should be aware to what extent we have infiltrated the plane." Iran has broke the encryption codes and begun construction of a replica of the Unit...

VideoLAN VLC Media Player 2.0.1 - .mp4 Crash (PoC)

VideoLAN VLC Media Player 2.0.1 - .mp4 Crash PoC Application : VLC 2.0.1 division by zero vulnerability Versions : 2.0.1 Date : 19/04/2012 Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPiratesInfo Bug : ---- division by zero vulnerability during the...

Trend Micro Internet Security Pro Activex Exploit

Exploit for windows platform in category remote exploits Application :Trend Micro Internet Security Pro Activex Exploit Date : 03/04/2012 Tested on : WinXp EN SP3 Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates Greets : to my friends in anywhere as especially eve...

K-Lite Mega Codec Pack 5.7.0 (.avi) use-after-free vulnerability

Exploit for windows platform in category local exploits Application :K-Lite Mega Codec Pack 5.7.0 .avi use-after-free vulnerability Auther : Senator of Pirates E-Mail : email protected FaceBook : /SenatorofPirates Bug : ---- Registers: eax=aa000080 ebx=00000000 ecx=719b3800 edx=00100000...

RealPlayer - '.mp4' file handling memory Corruption

Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08 MOV EAX,DWORD PTR SS:EBP+8 ; EAX is Pointer to valu...