SAP Mobile Platform application import XML external entity vulnerability

SAP Mobile Platform SMP is a mobile application development platform from SAP. The platform is used to build packaged and customized development applications for any device. An XML external entity vulnerability exists in the application import feature of SMP version 2.3. A remote attacker can...

CVE-2015-6664

CVE-2015-6664 affects SAP Mobile Platform 2.3 and potentially others, with an XML External Entity (XXE) vulnerability in the application import feature. An attacker can read arbitrary files on the server by crafting XML data that leverages a DTD. Vulnerable component: the XML parser handling appl...

Netsparker Remote Code Execution Vulnerability - Windows

Netsparker is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netsparker:wass...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

SAP PCo agent - DoS vulnerability

Application: SAP PCo Vendor: Bugs: DoS Reported: 05.09.2015 Vendor response: 06.09.2015 Date of Public Advisory: 20.11.2015 Reference: SAP Security Note 2238619 Author: Mathieu GELI ERPScan VULNERABILITY INFORMATION Class: Denial of service Impact: Disrupt operational status Remotely Exploitable:...

Fedora 22 : wpa_supplicant-2.3-3.fc22 (2015-6898)

This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libtasn1-tools-2.3 package of the Red Hat Enterprise Linux operating system can be exploited, which may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Drupal Cloudwords for Multilingual Drupal module cross-site scripting vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community. cloudwords for Multilingual Drupal is one of the modules that provides multiple language translations. A cross-site scripting vulnerability exists in the Drupal Cloudwords for...

NetCat CMS Multiple Vulnerabilities

NetCat CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

alMnzm 2.3 Cookie Based Injection Exploit

Usage Info a SQL injection in almnzm script This is private exploit. You can buy it at https://0day.today...

Doyo 2.3 /pay.php SQL注入漏洞

No description provided by source...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of administrators for requests that add an administrator user via a newuser request to admin/index.php...

SA-CONTRIB-2015-033 - Certify - Access bypass and information disclosure

Certify enables you to automatically issue PDF certificates to users upon completion of a set of conditions. The module does not sufficiently check node access when showing and creating the PDF certificates. This can lead to users seeing certificates they should not have access to. This...

WordPress Pixarbay Images 2.3 Multiple Vulnerabilities

WordPress Pixarbay Images plugin version 2.3 suffers from authentication bypass, cross site scripting, remote shell upload, and path traversal vulnerabilities. Title: WP Pixarbay Images Multiple Vulnerabilities Product: Pixarbay Images Wordpress Plugin Affected versions: 2.3 Impact: high Remote:...

CuuMall 2.3 /Lib/Action/Home/UserinfoAction.class.php SQL注入漏洞

No description provided by source...

CuuMall 2.3 /CarAction.class.php SQL注入漏洞

No description provided by source...

[SECURITY] Fedora 21 Update: python-oauth2-1.5.211-8.fc21

Oauth2 was originally forked from Leah Culver and Andy Smith's oauth.py code. Some of the tests come from a fork by Vic Fryzel, while a revamped Request class and more tests were merged in from Mark Paschal's fork. A number of notable differences exist between this code and its forefathers: - 100...

CVE2014-6 2 8 7 analysis report-vulnerability warning-the black bar safety net

0x00 is written on the front In the cloud zone, see the HFS 2.3 x Remote command executioncatch the chicken hack doom of the article, just before analysis of binary vulnerabilities, this command injection vulnerability, or the first analysis, from the Internet under the HFS 2.3.279 this version u...

HFS 2.3 x Remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

The search method 0x1 ZoomEye search http://www.zoomeye.org/search?q=HFS+2.3 0x2 google Hack intext:server information with finished version Catch the chicken hackers don't hit I want to hit a certain author-you!...

HttpFileServer 2.3.x Remote Command Execution Vulnerability

Exploit for multiple platform in category remote exploits Affected software: http://sourceforge.net/projects/hfs/ Version : 2.3x Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa...