142 matches found
SAP NetWeaver J2EE Engine 7.40 - SQL Injection Exploit
Exploit for multiple platform in category web applications !/usr/bin/env python coding=utf-8 """ Author: Vahagn Vardanyan https://twitter.com/vah13 Bugs: CVE-2016-2386 SQL injection CVE-2016-2388 Information disclosure CVE-2016-1910 Crypto issue Follow HTTP request is a simple PoC for anon...
SAP NetWeaver J2EE Engine 7.40 - SQL Injection
SAP NetWeaver J2EE Engine 7.40 - SQL Injection !/usr/bin/env python coding=utf-8 """ Author: Vahagn Vardanyan https://twitter.com/vah13 Bugs: CVE-2016-2386 SQL injection CVE-2016-2388 Information disclosure CVE-2016-1910 Crypto issue Follow HTTP request is a simple PoC for anon time-based SQL...
SAP NetWeaver AS Java Multiple Vulnerabilities (2101079, 2191290, 2256846) - Active Check
SAP NetWeaver Application Server AS Java is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
sierratradingpost.com Open Redirect vulnerability
Vulnerable URL: http://www.sierratradingpost.com/viewswitcher/switchview/?mobile=True=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 02.04.2016 Latest check for patch:| 02.04.2016 01:27 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclose...
CVE-2016-1910
CVE-2016-1910 affects SAP NetWeaver 7.4 UME (User Management Engine) and is described as a cryptographic issue enabling attackers to decrypt data via unspecified vectors (SAP Security Note 2191290). The connected materials indicate this is a crypto-issue vulnerability with publicly available PoCs...
Oracle: Security Advisory (ELSA-2011-1458)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-0845)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1910
Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-1910
CVE-2015-1910 is an XSS vulnerability in IBM InfoSphere MDM Reference Data Management. The flaw affects IBM InfoSphere MDM Reference Data Management on the server side in versions 10.1 (before IF1), 11.0 (before FP3), and 11.3, allowing remote authenticated users to inject arbitrary script via a ...
F5 Networks BIG-IP : BIND vulnerability (SOL12985)
Off-by-one error in named in ISC BIND 9.x before 9.7.3-P1, 9.8.x before 9.8.0-P2, 9.4-ESV before 9.4-ESV-R4-P1, and 9.6-ESV before 9.6-ESV-R4-P1 allows remote DNS servers to cause a denial of service assertion failure and daemon exit via a negative response containing large RRSIG RRsets...
openSUSE Security Update : bind (openSUSE-SU-2011:0603-1)
This update provides bind 9.7.3P1 which fixes a denial of service issue in RRsig RRSET handling. CVE-2011-1910 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-4633. The text description o...
openSUSE Security Update : bind (openSUSE-SU-2011:0603-1)
This update provides bind 9.7.3P1 which fixes a denial of service issue in RRsig RRSET handling. CVE-2011-1910 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-4634. The text description o...
Microsoft Word TextBox Sub-document Memory Corruption - Ver2 (CVE-2007-1910)
A memory corruption vulnerability has been reported in Microsoft Office Word. The vulnerability is due to improper validation of a supplied value inside the Main Stream. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2014-1910
CVE-2014-1910 affects Citrix ShareFile Mobile for Android and ShareFile Mobile for Tablets prior to version 2.4.4. The vulnerability is due to improper SSL certificate validation (X.509) which can allow MITM attackers to spoof servers and exfiltrate data. Citrix advisories (CTX140303) and NVD/NVD...
Borland Software InterBase ibserver.exe Service Attach Request Buffer Overflow (CVE-2008-1910)
A buffer overflow vulnerability has been reported in Borland InterBase Server...
Ubuntu Update for bind9 USN-1910-1
Check for the Version of bind9 OpenVAS Vulnerability Test $Id: gbubuntuUSN19101.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for bind9 USN-1910-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
Slackware: Security Advisory (SSA:2011-147-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2011-224-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201206-01 (bind)
The remote host is missing updates announced in advisory GLSA 201206-01. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...