Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID: ====================================...

u-mail 代码执行漏洞

No description provided by source...

u-mail注入导致任意代码执行漏洞

简要描述： 详细说明： u-mail注入导致任意代码执行漏洞 U mail 邮件系统涉及金融、政府、银行，石油、军队、证券、设置是国家外交部重要部门等。所以漏洞危害可想而知。 具体漏洞细节如下 在fileshare.php中 mysqlquery "SET NAMES 'UTF8'"; mysqlselectdb $database ; $fileid = $GET'file'; $inmail = $GET'inmail'; if !$fileid exitout"鍙傛暟閿欒锛? ; $fileid = rawurldecode base64decode$fileid ; $sql ...

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment...

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment...

Bluetooth U 1.2.0 Directory Traversal

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-16 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1111 Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID: ====================================...

mp3-player 2.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

Multiple vulnerabilities in mp3-player

Hello 3APA3A! These are Cross-Site Scripting and Content Spoofing vulnerabilities in mp3-player. ------------------------- Affected products: ------------------------- Vulnerable are mp3-player 2.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Stud...

Multiple vulnerabilities in flv-player

Hello 3APA3A! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Stud...

flv-player 3.5 Cross Site Scripting / Content Spoofing

Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...

PT-2013-67: Sensitive Information Disclosure in Serv-U File Server

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Serv-U File Server. This vulnerability allows an attacker to find out the system configuration and obtain users’ authentication information via Serv-U variables values. Exploitation...

PT-2013-69: Denial of Service in Serv-U File Server

The specialists of the Positive Research center have detected a Denial of Service vulnerability in Serv-U File Server. Handling HTTP request with a recursive variable causes the application to enter an infinite loop, resulting in Denial of Service. Exploitation...

PT-2013-66: Cross-Site Request Forgery (CSRF) in Serv-U File Server

The specialists of the Positive Research center have detected a Cross-Site Request Forgery vulnerability in Serv-U File Server. All kinds of web interfaces are vulnerable to Cross-Site Request Forgery CSRF attacks. The vulnerability allows an attacker to modify the system configuration. How to fi...

PT-2013-70: Multiple Cross-Site Scripting (XSS) in Serv-U File Server

The specialists of the Positive Research center have detected Multiple Cross-Site Scripting vulnerabilities in Serv-U File Server. The application does not perform sufficient validation of parameters, which are sent by client and used in HTM scripts. This vulnerability allows an attacker to execu...

PT-2013-68: Sensitive Information Disclosure in Serv-U File Server

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Serv-U File Server on Windows. The system does not consider that NTFS allows users to address files with extended syntax, while matching the requested resource URL with locations...

U-mail 9.8.53 /worldClient/html/fileshare.php SQL注入漏洞

No description provided by source...

Serv-U SSL远程拒绝服务及LDAP漏洞

Serv-U是一种使用广泛的FTP服务器程序。 Serv-U 15.0.0.0之前版本在SSL和LDAP的实现上存在安全漏洞，可导致拒绝服务等其他影响。成功利用此漏洞需要设置 "Require Fully Qualified Membership" LDAP登录设置。 0 serv-u 14.x 厂商补丁： serv-u ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.serv-u.com/releasenotes/...

Serv-U < 14.0.2.0 FTP Server SSL Renegotiation DoS

According to its banner, the installed version of Serv-U is earlier than 14.0.2.0 and is, therefore, potentially affected by a denial of service vulnerability. A remote attacker could cause denial of service conditions by continually sending SSL renegotiation requests to the application...