CVE-2014-1694

Multiple cross-site request forgery CSRF vulnerabilities in 1 CustomerPreferences.pm, 2 CustomerTicketMessage.pm, 3 CustomerTicketProcess.pm, and 4 CustomerTicketZoom.pm in Kernel/Modules/ in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allow...

SimplyShare 1.4 Code Execution / Local File Inclusion / XSS

Document Title: =============== SimplyShare v1.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1181 Release Date: ============= 2014-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1181...

Directory traversal

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2.1 and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056...

PT-2014-3761

Name of the Vulnerable Software and Affected Versions Cisco Jabber versions 9.2.1 and earlier Description A directory traversal issue in the Send Screen Capture feature allows remote attackers to upload arbitrary files and execute arbitrary code via modified packets. Recommendations For Cisco...

CVE-2014-0666: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2.1 and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056...

PayPal.com | Send Money Stored XSS Vulnerability

This vulnerability allows steal money, cookies, infection with exploit-pack and much, much more. If the user go to the "Send Money" tab, then vulnerability is exploited. The vulnerability has not been reported to PayPal Sec-Team. PayPal developers possibly do not know about its existence. This is...

PT-2013-5446

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.3 through 9.2-PRERELEASE Description The issue is related to the SCTP implementation in the kernel. It allows remote attackers to obtain sensitive information from kernel stack memory by reading packet data in INIT-ACK chunk...

WS-2013-0247

In xwiki-platform versions xwiki-platform-5.0 through xwiki-platform-5.1 are vulnerable to cross-site request forgery in the send message functionality...

Android Vulnerability Bypasses App's Digital Signature

A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the app’s cryptographic signature—an action that would normally set off a red flag that something is amiss. Researchers at startup...

imacs CMS 0.3.0 Shell Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : imacs CMS Unrestricted File Upload Exploit Date...

UBUNTU-CVE-2013-2081

Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data...

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2013-0308

CVE-2013-0308 affects the git tool’s imap-send command: prior to version 1.8.1.4, it does not verify that the SSL server hostname matches the certificate’s CN/subjectAltName, enabling MITM spoofing with any valid cert. Affected releases include git versions before 1.8.1.4; multiple advisories (e....

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2013-0308: Improper Input Validation

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2013-1195

Name of the Vulnerable Software and Affected Versions git versions 1.7.1 git-all versions 1.7.1 git-cvs versions 1.7.1 git-daemon versions 1.7.1 git-debuginfo versions 1.7.1 git-email versions 1.7.1 git-gui versions 1.7.1 git-svn versions 1.7.1 git-web versions 1.7.1 gitk versions 1.7.1 Descripti...