CVE-2014-6990

The CVE-2014-6990 entry concerns the Android app “Albasit artes y danza” (package com.adianteventures.adianteapps.albasit_artes_y_danza), version 1.2, which fails to verify X.509 certificates for SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2014-6990

The Albasit artes y danza aka com.adianteventures.adianteapps.albasitartesydanza application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

UBUNTU-CVE-2014-7187

Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via deeply nested for loops, aka the "wordlineno" issue...

Huawei Switch DoS (HWPSIRT-2013-1165)

The remote host is a Huawei switch running a firmware version that is affected by a denial of service vulnerability due to a flaw in Y.1731. A remote, unauthenticated attacker could exploit this vulnerability by sending specially crafted packets to cause a device restart. %NASLMINLEVEL 70300 C...

Battle.net Clan Script for PHP 1.5.1 - Remote SQL Injection Vulnerability

No description provided by source. script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass';...

Auktionshaus 4 - news.php SQL Injection Vulnerability

No description provided by source. Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter...

uGround <= 1.0b SQL Injection Vulnerability

No description provided by source. uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: uGround v1.0b SQL Injection news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl...

Phpkit 1.6.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace ...

Huawei Ethernet Switches Y.1731拒绝服务漏洞

Huawei Ethernet Switches存在拒绝服务漏洞。 该漏洞是由于处理某些Y.1731报文时造成的错误，可被黑客利用来导致设备通过特制的数据包重新载入。 0 Huawei S2300 Huawei S3300 Huawei S5300 Huawei S6300 Huawei S9300 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-329625.htm...

Security Advisory- Y.1731 Vulnerability on Some Huawei Switches

Y.1731 is an ITU-T recommendation for OAM features on Ethernet-based networks. Y.1731 provides connectivity detection, diagnosis, and performance monitoring for VLAN/VSI services on MANs. Some Huawei switches support Y.1731 and therefore, has the Y.1731 vulnerability in processing special packets...

CVE-2013-6853

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

Cross site scripting

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

CVE-2013-6853

The CVE-2013-6853 entry describes a Cross-Site Scripting (XSS) vulnerability in the clickstream.js component of the Y! Toolbar Firefox plugin. Affected products are Y! Toolbar for Firefox on Mac (version 3.1.0.20130813024103) and Windows (version 2.5.9.2013418100420). The flaw allows remote attac...

CVE-2013-6853

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

ООН внедряет механизм "шпионажа" за пользователями Сети

На Всемирной конференции по международной электросвязи ВКМЭ 2012 был утвержден стандарт по применению технологии DPI Deep Packet Inspection. Если этот инструмент действительно будет внедрен, конфиденциальность многих пользователей может оказаться под угрозой, пишет CNET. ООН внедряет механизм...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

CVE-2010-5284

Multiple cross-site scripting XSS vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 User parameter in the edit user profile feature to manageuser.php, 2 y parameter in a newcal action to manageajax.php, and the 3 pic parameter to thumb.php...

XSS and Blind SQL Injection Vulnerabilities in ExponentCMS

Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Onur Y?lmaz...

Generation Y Won't Listen To IT

The latest generation of desk-jockey’s admitted in a recent CISCO study that they frequently ignore and/or circumvent the information technology IT policies of their employers, heightening corporate risk. The CISCO Connected World Technology Report surveyed some 2,800 college students and young...