CVE-2014-7547

The CVE-2014-7547 entries identify a vulnerability in the Android app Texas Poker Unlimited Hold’em (com.fpinternet.texaspokerunlimitedholdem) version 1.2.0, where SSL certificate validation is not performed. This allows a man-in-the-middle attacker to spoof servers and obtain sensitive informati...

Information disclosure

The JJ Texas Hold'em Poker aka cn.jj.poker application 1.13.23.HD for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7015

CVE-2014-7015 affects the Android app JJ Texas Hold’em Poker (cn.jj.poker) v1.13.23.HD, where the client does not verify X.509 certificates from SSL servers. The root cause is missing certificate validation, which enables man-in-the-middle attackers to spoof servers and potentially obtain sensiti...

CVE-2014-5771

Credit Union of Texas Mobile (Fi_Mobile.CUOT) Android app 1.1 is vulnerable due to lack of X.509 certificate validation in SSL/TLS, allowing MITM attacker to spoof servers and access sensitive data via crafted certificates. Affected: CUOT Android app v1.1. No remediation details provided in the c...

CVE-2014-5771

The Credit Union of Texas Mobile aka FiMobile.CUOT application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Texas Rankem tournaments.asp tournament_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21168/info ClickTech Texas Rank'em is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow Exploit

No description provided by source. !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website...

Texas Imperial Software WFTPD 3.23 SIZE Overflow

No description provided by source. $Id: wftpdsize.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow PoC

No description provided by source. WftpdExpProHeapPoC.py Discovered by r4x Kamil Szczerba [email protected] Soft : WFTPD Explorer Pro 1.0 Vendor : Texas Imperial Software Vuln : Heap Overwlow Res: LIST Exploit : PoC Reg Overwrite Reg: EAX = 41414141 ECX = 41414141 EDX = 00a57b38 ASCII AAAA... ESI =...

Texas Rankem player.asp selPlayer Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21168/info ClickTech Texas Rank'em is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Anonymous Hacker Charged with CyberStalking Faces 440 Years in Jail

An alleged member of the famous amorphous Hacktivist group Anonymous is now facing a total of 44 charges after the filing of the latest superseding Indictment of cyber assaults charges against him with the collective to hack Computer systems of a County Government, a school district and a Newspap...

Vulnerable Texas Transportation Site 'TxTag' leaves 1.2 Million Credit Cards at Risk

Do you know, Why another major company is getting hacked every week? Because of poor policies, Laziness to Incident Response and lack in will-power to put efforts on applying important patches. Some companies are not taking their security more seriously, and best suitable example for this is TxTa...

UTA EDU University ENG SQL Injection

Title: ====== UTA EDU University ENG - SQL Injection Vulnerability Date: ===== 2013-08-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=256 VL-ID: ===== 256 Common Vulnerability Scoring System: ==================================== 8.4 Introduction: ============= The...

UTA EDU University ENG - SQL Injection Vulnerability

Document Title: =============== UTA EDU University ENG - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=256 Release Date: ============= 2013-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 256...

UTA EDU University ENG - SQL Injection Vulnerability

Document Title: =============== UTA EDU University ENG - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=256 Release Date: ============= 2013-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 256...

Two Texas Bills Could Shape Mobile Privacy

Two bills introduced in Texas this week could refine mobile privacy in the state and tweak how law enforcement can request sensitive information from cell phones going forward. A press release from the Texas Electronic Privacy Coalition TxEPC credits Bryan Hughes, a Republican from the town of...

Judge Rules Against Texas Teen Who Refused to Wear SmartID Badge

In a closely watched case, a federal judge today ruled against a high school sophomore who refused to wear a student ID embedded with a radio frequency chip that tracks students’ movement on campus. The teenager, Andrea Hernandez, and her father, Steven Hernandez, sued a San Antonio school distri...

SSL Vulnerabilities Found in Critical Non-Browser Software Packages

The death knell for SSL is getting louder. Researchers at the University of Texas at Austin and Stanford University have discovered that poorly designed APIs used in SSL implementations are to blame for vulnerabilities in many critical non-browser software packages. Serious security vulnerabiliti...

Facebook Privacy Flaw exposed two College Gay Students Accidentally

Facebook is continually changing its privacy settings, trying to give users more control over what they want to share and with whom. Two gay college students were outed on Facebook because of a privacy flaw in Facebook Groups. Users can be added to Facebook Groups by friends without the user's...

Coalfire Client FireHost Achieves HITRUST CSF Certification

Yesterday, we were delighted to see our long-time client Firehost announce that they achieved Common Security Framework CSF "Certified" status from the HITRUST Alliance. Headquartered in Richardson, Texas, FireHost has made compliance a top priority, and weve enjoyed working with them to achieve...