1342 matches found
Apache Spark Cluster Arbitary Code Execution Exploit
Spark clusters which are not secured with proper firewall can be taken over easily Since it does not have any authentication mechanism, this exploit simply runs arbitrary codes over the cluster. All you have to do is, find a vulnerable Spark cluster usually runs on port 7077 add that host to your...
CVE-2014-5867
The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5867
CVE-2014-5867 concerns the Capital One Spark Pay Android app (com.capitalone.sparkpay) version 0.9.81, where the SSL implementation does not verify X.509 certificates. The root cause is failure to validate server certificates, which enables man-in-the-middle attackers to spoof servers and potenti...
CVE-2014-5867: Undefined Security Weakness
The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Baidu Spark Browser Denial of Service Vulnerability -01 (Aug 2014) - Windows
Baidu Spark Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow DoS
Exploit for windows platform in category dos / poc...
Baidu Spark Browser Detection (Windows SMB Login)
Detects the installed version of Baidu Spark Browser. The script logs in via smb, searches for Baidu Spark Browser in the registry and gets the version from registry SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
CVE-2014-5349
Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...
Stack overflow
Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...
CVE-2014-5349
Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...
CVE-2014-5349
The CVE-2014-5349 entry concerns Baidu Spark Browser. Affected component: Spark Browser (version 26.5.9999.3511). Root cause: stack-based buffer overflow exploited via nested calls to the window.print JavaScript function. Impact: remote attackers can trigger a denial of service (application crash...
CVE-2014-5349: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service application crash via nested calls to the window.print JavaScript function...
Baidu Spark Browser 26.5.9999.3511 - Remote Stack Overflow (Denial of Service)
Baidu Spark Browser 26.5.9999.3511 - Remote Stack Overflow Denial of Service !-- Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow Vulnerability DoS Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browse...
Baidu Spark Browser 26.5.9999.3511 - Remote Stack Overflow (Denial of Service)
Bai...
Baidu Spark Browser 26.5.9999.3511 Stack Overflow
...
Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow Vulnerability (DoS)
Summary Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Description Spark Browser version 26.5.9999.3511 allows remote attackers to cause a denial of service application crash...
Windows Gather Spark IM Password Extraction
This module will enumerate passwords stored by the Spark IM client. The encryption key is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. This module requires Metasploit: https://metasploit.com/download Current source:...
Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45682/info Openfire is prone to multiple cross-site-scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...