CVE-2014-7804

The Gangsta Auto Thief III aka com.apptreestudios.gdup3 application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7804

The Gangsta Auto Thief III aka com.apptreestudios.gdup3 application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7804

The CVE-2014-7804 entry concerns The Gangsta Auto Thief III (com.apptreestudios.gdup3) on Android, version 1.1, which does not verify X.509 certificates when connecting to SSL servers. This creates susceptibility to man-in-the-middle attacks where an attacker could spoof a server and extract sens...

PT-2014-8286

Name of the Vulnerable Software and Affected Versions The Gangsta Auto Thief III aka com.apptreastudios.gdup3 version 1.1 Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-7804: Undefined Security Weakness

The Gangsta Auto Thief III aka com.apptreestudios.gdup3 application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hardcoded credentials

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The CVE-2014-6760 entry concerns the Android app Harem Thief Dating (com.haremthief.haremthief) , version 1.2.1. The root cause is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle (MITM) attacks to spoof servers and access sensitive inform...

PT-2014-7438

Name of the Vulnerable Software and Affected Versions The Harem Thief Dating application version 1.2.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6760: Undefined Security Weakness

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Samsung Galaxy S5 Fingerprint Scanner Easily Get Hacked

Samsung Galaxy S5 Fingerprint feature promises an extra layer of security for your smartphone, which also lets you make payments through PayPal. But does it really secure? Just three days after the launch of the Galaxy S5, Security researchers have successfully managed to hack Galaxy S5 Fingerpri...

Questions Linger About New Linux 'Hand of Thief' Trojan

It looks like cybercriminals will soon be able to add yet another Trojan to their hacking repertoire, the Hand of Thief banking malware that targets Linux machines. Currently being sold on the Russian black market, Hand of Thief is fetching $2,000 USD €1,500 EUR but could be poised to run a cool...

Mad Pirates of the novel the thief GETshell vulnerabilities and fixes-vulnerability warning-the black bar safety net

Team:t00ls Author: Cond0r Silly than a vulnerability Must be turned on cache to use First look at the code book.php $kdcachedir = "./ cache"; if$kdbookcache=="ture"//cache must be turned on $lastflesh = @filemtime$kdcachedir."/ book$shuid.html"; // echo $lastflesh; if! fileexists"./...

Unfixed XSS vulnerability at www.hostarge.com

Security researcher Cyber-Thief, has submitted on 21/04/2011 a cross-site-scripting XSS vulnerability affecting www.hostarge.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...

ID-theft suspects arrested by Detectives !

A nearly nine-month investigation by Santa Barbara County Sheriff's detectives has led to the arrest of a former UCSB student as a suspected identity thief who bilked at least five victims out of at least $158,000. Imoukhuede Ohiwerei Ehimika, 26, of Nigeria was arrested Dec. 21 at his home in th...

Unfixed XSS vulnerability at libweb1.lib.buffalo.edu

Security researcher cyberthief, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting libweb1.lib.buffalo.edu, which at the time of submission ranked 8540 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It i...

Unfixed XSS vulnerability at www.marmaracicek.com

Security researcher cyberthief, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.marmaracicek.com, which at the time of submission ranked 426839 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Unfixed XSS vulnerability at www.erdemofis.com

Security researcher cyberthief, has submitted on 12/02/2007 a cross-site-scripting XSS vulnerability affecting www.erdemofis.com, which at the time of submission ranked 6756403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2007. It is...

Unfixed XSS vulnerability at www.koreainfogate.com

Security researcher cyberthief, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.koreainfogate.com, which at the time of submission ranked 321900 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It i...