8759 matches found
Code injection
Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for 1 eccert.pl and 2 ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files...
Wonderful World-Wide CMS SQL Injection / Default Credentials
Title : Wonderful World-wide CMS Multiple Vulnerability Author : eX-Sh1Ne Facebook : fb..me/ShiNe.gov // fb.com/EksShiNe Date : 24/10/2014 Category : Web Applications Type : PHP Vendor : n/a Download : n/a Greetz : Java Defacer Team - Sanjungan Jiwa - All Indonesian Defacer Team Thanks : Admin07,...
CVE-2014-7778
The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7771
The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4885
The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7778
The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7771
The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4885
The CVE-2014-4885 entry concerns the CPWORLD Close Protection World Android app (com.tapatalk.closeprotectionworldcom) version 3.4.4. It is vulnerable because the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive information via...
CVE-2014-4885
The CPWORLD Close Protection World aka com.tapatalk.closeprotectionworldcom application 3.4.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7771
The World Tamil Bayan aka com.wWorldTamilBayan application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7778
The CVE-2014-7778 entry affects the Android app “Epc World” (package com.magzter.epcworld) version 3.1. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certific...
CVE-2014-7771
CVE-2014-7771 affects the World Tamil Bayan Android app (package com.wWorldTamilBayan) version 0.1, which does not verify X.509 certificates from SSL servers. This causes reliance on trust in the server’s certificate and enables man-in-the-middle attackers to spoof servers and access sensitive in...
CVE-2014-7778
The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5449
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...
CVE-2014-5448
Zarafa 5.00 uses world-readable permissions for the files in the log directory, which allows local users to obtain sensitive information by reading the log files...
CVE-2014-5449
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...
Design/Logic Flaw
Zarafa WebAccess 4.1 and WebApp uses world-readable permissions for the files in their tmp directory, which allows local users to obtain sensitive information by reading temporary session data...