738 matches found
Information disclosure
The UA Cinemas - Mobile ticketing aka com.mtel.uacinemaapps application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5902
The CVE-2014-5902 entry concerns the UA Cinemas - Mobile ticketing (aka com.mtel.uacinemaapps) Android app version 2.9, which fails to verify X.509 certificates from SSL servers. This omission enables man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted cer...
PT-2014-6887
Name of the Vulnerable Software and Affected Versions UA Cinemas - Mobile ticketing aka com.mtel.uacinemaapps version 2.9 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...
CVE-2014-5902: Undefined Security Weakness
The UA Cinemas - Mobile ticketing aka com.mtel.uacinemaapps application 2.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
SpiceWorks 7.2.00174 - Persistent XSS Vulnerabilities
No description provided by source. Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Version: 7.2.00174 Latest...
e-ticketing - SQL Injection
No description provided by source. 'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. I...
CVE-2014-3740 - SpiceWorks Cross-site scripting
Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system CVE: CVE-2014-3740 Vendor: SpiceWorks Product: SpiceWorks IT ticketing system Affected versions: any version below 7.2.00195 Fixed version: 7.2.00195 1. About the application: ======================= SpiceWorks is a...
SpiceWorks IT Ticketing System Cross Site Scripting
Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system CVE: CVE-2014-3740 Vendor: SpiceWorks Product: SpiceWorks IT ticketing system Affected versions: any version below 7.2.00195 Fixed version: 7.2.00195 1. About the application: ======================= SpiceWorks is a...
SpiceWorks 7.2.00174 Cross Site Scripting Vulnerability
SpiceWorks version 7.2.00174 suffers from persistent cross site scripting vulnerabilities. Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link:...
SpiceWorks 7.2.00174 Cross Site Scripting
Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Version: 7.2.00174 Latest Tested on: Kali Linux Vendor alerte...
SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting
SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Versio...
SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting
Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Version: 7.2.00174 Latest Tested on: Kali Linux Vendor alerte...
Ian Dunn: Xss in CampTix Event Ticketing
Xss present in tools -- Notify I have made small video poc please have a look : https://www.dropbox.com/s/smuy4lfjwt9fx1v/ticket.mp4 Looking forward Atul...
Fedora Update for rt3 FEDORA-2012-17174
Check for the Version of rt3 OpenVAS Vulnerability Test Fedora Update for rt3 FEDORA-2012-17174 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for rt3 FEDORA-2012-17218
Check for the Version of rt3 OpenVAS Vulnerability Test Fedora Update for rt3 FEDORA-2012-17218 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 18 Update: rt3-3.8.15-1.fc18
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
[SECURITY] Fedora 17 Update: rt3-3.8.15-1.fc17
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
[SECURITY] Fedora 16 Update: rt3-3.8.15-1.fc16
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...
CVE-2011-5187
Cross-site scripting XSS vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors...