A General campus of the system to the presence of multiple high-risk vulnerabilities(registration logic&getshell)-vulnerability warning-the black bar safety net

About Beijing Chong star weiye software Technology Co., Ltd. development of the education system vulnerability report 1. A large cattle submitted to such a vulnerability : the versatility of the SQL injection vulnerability of 1influence of Beijing, all kindergarten schools, etc., a SQL injection...

CVE-2014-7396

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7396

The PocketKnife Bravo Super aka com.wPocketKnifeBravo application 0.54.13345.33028 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7396

The CVE-2014-7396 entry concerns the PocketKnife Bravo Super Android app (com.wPocketKnifeBravo) version 0.54.13345.33028, which does not verify X.509 SSL certificates. This缺证 allows MITM attackers to spoof SSL servers and obtain sensitive information via a crafted certificate. The connected sour...

EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities (ESA-2014-091)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper handling of system objects that allows a user to escalate their privileges to super-user status. CVE-2014-4621 - A...

CVE-2014-5966

The Dreamland Super Theme GO Gold aka com.gau.go.launcherex.viptheme.dreamland.gold application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4621

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

Authorization

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types, which allows remote authenticated users to obtain super-user privileges for system-object creation, and bypass intended restrictions ...

CVE-2014-4622

EMC Documentum Content Server before 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups, which allows remote authenticated sysadmins to gain super-user privileges, and bypass intended restrictions on data access and server...

Design/Logic Flaw

The Super Fast Browser aka iron.web.jalepano.browser application 2.0.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5775

CVE-2014-5775 concerns the Android app The Super Fast Browser (iron.web.jalepano.browser) , version 2.0.5.6 , which does not verify X.509 certificates from SSL servers. This allows an attacker to perform a man-in-the-middle attack and obtain sensitive information via a crafted certificate. The av...

CVE-2014-5775

The Super Fast Browser aka iron.web.jalepano.browser application 2.0.5.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5671

The Super Stickman Golf aka com.noodlecake.ssg application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Super Stickman Golf aka com.noodlecake.ssg application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5671

CVE-2014-5671 affects the Android app “The Super Stickman Golf” (package com.noodlecake.ssg) version 2.2. The root cause is that the app does not verify X.509 certificates from SSL servers, which can enable man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-5671

The Super Stickman Golf aka com.noodlecake.ssg application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...

CVE-2014-5240

Cross-site scripting XSS vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL...