56 matches found
Sprite Software Android Race Condition
Subject: Race condition in Sprite Software's backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-3685 Initial disclosure: https://plus.google.com/110348415484169880343/posts/Me2yea2PgwE Source: https://github.com/CunningLogic/LGPwn Effect: Locally exploited vulnerability wit...
CVE-2012-3685
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...
CVE-2012-3685
CVE-2012-3685 affects WebKit as used in Apple iTunes before 10.7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Root cause is memory corruption in WebKit components leveraged when ...
CVE-2011-3685
Tembria Server Monitor (before 6.0.5 Build 2252) is vulnerable due to a substitution cipher used to encrypt application credentials, enabling local users with read access to authentication.dat or exports XML files to obtain sensitive information. This CVE (CVE-2011-3685) affects the confidentiali...
Debian: Security Advisory (DSA-2113-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3685
Summary of CVE-2010-3685 : The OpenID module in Drupal 6.x before 6.18 and the OpenID module 5.x before 5.x-1.4 fail to validate reuse of openid.response_nonce values, enabling remote attackers to bypass authentication by leveraging an assertion from an OpenID provider. This is a protocol-level f...
DSquare Exploit Pack: D2SEC_EMCAXW
Name| d2secemcaxw ---|--- CVE| CVE-2008-3685 Exploit Pack| D2ExploitPack Description| EMC ApplicationXtender Workflow Server Arbitrary File Upload Vulnerability Notes|...
CVE-2008-3685
CVE-2008-3685 affects EMC Documentum ApplicationXtender Workflow Server Admin Agent (aws_tmxn.exe); vulnerable via directory traversal sequences over TCP port 2606, enabling remote attackers to upload arbitrary files and execute arbitrary code. Impact is described as potentially remote code execu...
CVE-2008-3685
Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...
CVE-2007-3685
CVE-2007-3685 affects the Unobtrusive Ajax Star Rating Bar (rpc.php). The issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML via the q parameter in rpc.php, for versions before 1.2.0. The vulnerability is described across multiple sources as XSS in ...
CVE-2006-3685
CVE-2006-3685 describes a PHP remote file inclusion vulnerability in CzarNews versions 1.12 through 1.14. An attacker can cause arbitrary PHP code execution by supplying a URL in the tpath parameter to cn_config.php. This is a classic RFI flaw where user-controlled input is used to include files ...
MetaSploit Shell Detection
Binary data 3685.prm...
CVE-2005-3685
Cross-site scripting XSS vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...
IBM Tivoli SecureWay WebSEAL Proxy Policy Director Encoded URL DoS
The remote web server crashes when an URL ending with %2E is requested. An attacker may use this flaw to cause the server crash continually. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN...