Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-0432

CVE-2013-0432 affects the Java Runtime Environment (JRE) component in Oracle Java SE 7 (through Update 11) and OpenJDK 6/7. The issue is described as an unspecified vulnerability related to AWT that allows remote attackers to affect confidentiality and integrity. The provided connected documents ...

Novell eDirectory 8 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell eDirectory...

CVE-2012-0432

creationtimestamp| type| source ---|---|--- 2013-01-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24323 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/novelledirectoryncpbof.rb 2025-02-06 03:13:40+00:00|...

Novell NCP - Remote Command Execution

Novell NCP - Remote Command Execution In the interest of full-disclosure, here is a remote exploit for the vulnerability found by David Klein: Demonstration Novell NCP Pre-Auth Remote Stack Buffer Overflow Connecting to host 127.0.0.1... Connected! Sending message 1 23 bytes 74 4e 63 50 00 00 00 ...

CVE-2012-0432

CVE-2012-0432 describes a stack-based buffer overflow in the NetIQ eDirectory (Novell eDirectory) NCP stack (ndsd) for version 8.8.7.x prior to 8.8.7.2. The root cause is improper bounds checking in the NCP handling (KeyedObjectLogin path), enabling remote attackers to cause a likely remote code ...

Fedora Update for pywebdav FEDORA-2011-2460

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pywebdav FEDORA-2011-2460

Check for the Version of pywebdav OpenVAS Vulnerability Test Fedora Update for pywebdav FEDORA-2011-2460 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DEBIAN-CVE-2011-0432

Multiple SQL injection vulnerabilities in the getuserinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument. NOTE: some of these details are obtained from third party...

CVE-2011-0432

PyWebDAV vulnerability CVE-2011-0432 affects the PyWebDAV package prior to version 0.9.4.1. In DAVServer/mysqlauth.py, the get_userinfo method contains SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw parameters. This originates from a f...

CVE-2011-0432

Multiple SQL injection vulnerabilities in the getuserinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument. NOTE: some of these details are obtained from third party...

Fedora 15 : pywebdav-0.9.4.1-1.fc15 (2011-2427)

The server affected by the CVE is distributed only as documentation, not as a directly runnable component. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 14 : pywebdav-0.9.4.1-1.fc14 (2011-2460)

The server affected by the CVE is distributed only as documentation, not as a directly runnable component. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

[SECURITY] [DSA 2177-1] pywebdav security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2177-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

Apache OFBiz - Admin Creator

Apache OFBiz - Admin Creator / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var username = 'bonsaiUser'; var password = 'bonsaiPass'; var nodes =...

Apache OFBiz FULLADMIN Creator PoC Payload

Exploit for multiple platform in category remote exploits ========================================== Apache OFBiz FULLADMIN Creator PoC Payload ========================================== / Apache OFBiz FULLADMIN Creator PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com...

CVE-2010-0432

creationtimestamp| type| source ---|---|--- 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12264 2010-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12263 2010-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12330...

Apache OFBiz - Remote Execution (via SQL Execution)

Apache OFBiz - Remote Execution via SQL Execution / Apache OFBiz SQL Remote Execution PoC Payload. CVE: CVE-2010-0432 By: Lucas Apa lucas -at- bonsai-sec.com . Bonsai Information Security http://www.bonsai-sec.com/ / var cmd = 'command'; var xmlhttp=false; try xmlhttp = new...

Apache OFBiz Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Apache OFBiz 1. Advisory Information Title: Multiple XSS in Apache OFBiz Advisory ID: BONSAI-2010-0103 Advisory URL:...