867 matches found
CVE-2014-5913
The Allies in War aka com.gamelion.aiw application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Allies in War aka com.gamelion.aiw application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5913
The CVE-2014-5913 entry concerns The Allies in War (aka com.gamelion.aiw) Android app 1.3.2 failing to verify SSL server X.509 certificates, enabling MITM attackers to spoof servers and obtain sensitive data. Affected component: Android app networking/SSL validation; root cause: lack of certifica...
JBoss JMX Console Beanshell Deployer WAR Upload and Deployment
This module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment method. This module requires Metasploit: https://metasploit.com/download Current...
Blizzard Entertainment StarCraft Brood War 1.15.1 - Minimap Preview Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25478/info StarCraft Brood War is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. Attackers can exploit this issue to crash the affected application, denyi...
JBoss Java Class DeploymentFileRepository WAR deployment
No description provided by source. $Id: jbossdeploymentfilerepository.rb 9950 2010-08-03 15:14:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
War FTP Daemon 1.8 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon 1.82.00-RC9 is...
Sun/Oracle GlassFish Server Authenticated Code Execution
No description provided by source. $Id: glassfishdeployer.rb 13485 2011-08-04 17:36:01Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Alwjeez Script Database Backup Exploit
No description provided by source. ::::::::::::::::Exploit::::::::::: html center body text=00FF00 bgcolor=000000 p align=centerbspan lang=en-usSecurity war /span/b/p p align=centerbspan lang=en-usFor more exploits/span/b/p p align=centerspan lang=en-usbvisit/b /span/p p align=centerfont...
War-FTPD 1.65 Username Overflow
No description provided by source. $Id: warftpd165user.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Novell ZENworks Asset Management Remote Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Medieval Total War 1.0/1.1 nickname Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8787/info It has been reported that Medieval Total War may be prone to a denial of service vulnerability. The issue is caused when an attacker sends a malformed value for nickname consisting of 0 Unicode characters to the...
jarle aase war ftpd 1.67 b04 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2444/info A remote user could gain read access to directories outside of the ftp root in a Jarle Aase War FTPD Server. Once a user is logged into the server, a specially crafted 'dir' command will disclose an arbitrary...
JBoss JMX Console Beanshell Deployer WAR upload and deployment
No description provided by source. $Id: jbossbshdeployer.rb 11533 2011-01-10 14:34:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...
Jgaa WarFTPd 1.66 x4s/1.67 -3 CWD/MKD DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/966/info War-FTPd 1.67 and possibly previous versions are susceptible to a buffer overflow DoS attack. Due to improper bounds checking in the code that handles MKD and CWD commands, it is possible to remotely crash the...
War Times Remote Game Server Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13652/info War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size...
Clever's Games Terminator 3: War of the Machines 1.16 Server Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13776/info Terminator 3 : War of the Machines server is prone to a buffer overflow vulnerability that may permit remote attackers to execute arbitrary code on a vulnerable system, this may facilitate unauthorized access...
Powered by iNetScripts: Shell Upload Vulnerability
No description provided by source. ==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploi...
Liquid War 5.4.5/5.5.6 HOME Environment Variable Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8629/info Liquid War has been reported prone to a buffer overflow condition when handling HOME environment variables of excessive length. The issue presents itself, due to a lack of sufficient boundary checks performed on...
Apache Tomcat Manager Application Deployer Authenticated Code Execution
No description provided by source. $Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...