Axis2 / SAP BusinessObjects Authenticated Code Execution (via SOAP)

This module logs in to an Axis2 Web Admin Module instance using a specific user/pass and uploads and executes commands via deploying a malicious web service by using SOAP. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...

Apple Safari Multiple Vulnerabilities (Jul 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2011-0219

CVE-2011-0219 affects Apple Safari prior to 5.0.6, where a Java applet loading fonts can bypass the Same Origin Policy and alter the rendering of text from arbitrary websites. The issue is described in the Apple advisory as part of Safari’s vulnerabilities fixed by Safari 5.0.6 and in later 5.1 u...

HP Universal CMDB Server Axis2 default password

Added: 02/22/2011 CVE: CVE-2010-0219 BID: 45625 OSVDB: 70233 Background HP Universal CMDB Server 9.0 is a modular management system that consists of a rich business-service-oriented data model with built-in discovery of configuration items CIs and configuration item dependencies, visualization an...

HP Universal CMDB Server Axis2 default password

Added: 02/22/2011 CVE: CVE-2010-0219 BID: 45625 OSVDB: 70233 Background HP Universal CMDB Server 9.0 is a modular management system that consists of a rich business-service-oriented data model with built-in discovery of configuration items CIs and configuration item dependencies, visualization an...

CVE-2010-0219

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16315 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16312 2010-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15869 2018-05-29...

Axis2 / SAP BusinessObjects - (Authenticated) Code Execution (via SOAP) (Metasploit)

$Id: axis2deployer.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

R7-0037: SAP BusinessObjects Axis2 Default Admin Password

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

CVE-2010-0219

CVE-2010-0219 covers Apache Axis2 default credentials that affect dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2 and CA ARCserve D2D r15 among others. The issue arises from a default admin password (axis2), enabling remote attackers to upload a crafted web service and achieve arbitrary co...

Rapid7 Security Advisory 37

R7-0037: SAP BusinessObjects Axis2 Default Admin Password October 13th, 2010 Description: The SAP BusinessObjects product contains a module dswsbobje.war which deploys Axis2 with an administrator account which is configured with a static password. As a result, anyone with access to the Axis2 port...

CVE-2009-0219

Technical details for CVE-2009-0219 are not publicly available in the provided documents; monitor for updates.

CVE-2009-0219

The PDF distiller in the Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote...

FreeBSD Ports: gallery

The remote host is missing an update to the system as announced in the referenced advisory. VID 5752a0df-60c5-4876-a872-f12f9a02fa05 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0219

CVE-2008-0219 describes an SQL injection in PHP Webquest 2.6, affecting soporte_horizontal_w.php. The vulnerability allows remote attackers to inject arbitrary SQL through the id_actividad parameter, distinct from CVE-2007-4920. Impact stated is arbitrary SQL execution; no additional exploit deta...

CVE-2008-0219

SQL injection vulnerability in soportehorizontalw.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the idactividad parameter, a different vector than CVE-2007-4920...

CVE-2007-0219

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from 1 Msb1fren.dll, 2 Htmlmm.ocx, and 3 Blnmgrps.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2006-4697...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

MS07-016: Cumulative Security Update for Internet Explorer (928090)

The remote host is missing the IE cumulative security update 92808. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid24340;...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in usercp.php in MyBulletinBoard MyBB 1.02 allow remote attackers to inject arbitrary web script or HTML via the 1 notepad parameter in a notepad action and 2 signature parameter in an editsig action. NOTE: These are different attack vectors, and...

CVE-2006-0219

CVE-2006-0219 affects MyBulletinBoard (MyBB) prior to 1.0.2. The advisory notes that the update path may omit/include older copies of critical files, enabling (1) SQL injection via an attachment name handled by inc/functions_upload.php (related to CVE-2005-4602) and (2) other issues tied to threa...