what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Will Dormann

MercadoLibre SSL Certification Validation Flaw

Posted Nov 11, 2014

Authored by Will Dormann, Joaquin Manuel Rinaudo

The MercadoLibre application for Android is missing SSL certificate validation.

tags | advisory

advisories | CVE-2014-5658

SHA-256 | 1274342e7f84eb0760361ff12caf57c0aebaeeaa1849eaa432b0f6a63fc7e729

Download | Favorite | View

PicsArt Photo Studio For Android Insecure Management

Posted Nov 7, 2014

Authored by Will Dormann, Joaquin Manuel Rinaudo

PicsArt Photo Studio for Android fails to properly validate SSL certificates from the server.

tags | exploit

advisories | CVE-2014-5674

SHA-256 | 1bf0140231dd801b791db063a9b62942dddc247abd91aa4eb0d822492a0ab76e

Download | Favorite | View

SYM07-007.txt

Posted May 17, 2007

Authored by Will Dormann | Site symantec.com

CERT notified Symantec that a buffer overflow exists in an ActiveX Control used by Norton Personal Firewall. The error occurs in the Get() and Set() functions used by ISAlertDataCOM, which is part of ISLALERT.DLL. A successful exploit of this vulnerability could potentially allow the remote execution of code on a vulnerable system, with the rights of the logged-in user.

tags | advisory, remote, overflow, activex

SHA-256 | d49a4538ed914205ac16fccdbfb47339d45d295f3853beba2e60cbf022694dfe

Download | Favorite | View