CVE-2015-5344

Apache Camel camel-xstream component suffers a remote code execution risk due to deserialization of untrusted data. The affected component is Camel XStream, with versions prior to 2.15.5 and 2.16.x prior to 2.16.1. The root cause is deserialization of crafted serialized Java objects, and exploita...

FreeBSD : magento -- multiple vulnerabilities (ea1d2530-72ce-11e5-a2a1-002590263bf5)

Magento, Inc. reports : SUPEE-6482 - This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 - This patch provides protection against several types of security-related issues, including information leaks, request forgeries, and cross-site scripting. SUPEE-59...

Magento eCommerce - Remote Code Execution Exploit

Magento shoplift exploit that adds an administrator account. Flaw originally discovered by CheckPoint. Exploit Title : Magento Shoplift exploit SUPEE-5344 Author : Manish Kishan Tanwar AKA error1046 Date : 25/08/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Jagriti,Kishan Singh...

Magento remote code execution vulnerability analysis report-vulnerability warning-the black bar safety net

Check Point company researchers recently in Magento e-Commerce network platform on which to found a dangerous remote code execution RCE）vulnerabilities, the vulnerabilities could cause the Magento platform on the e-shops of all hackers, including credit card information and some other property an...

CVE-2014-5344

Multiple cross-site scripting XSS vulnerabilities in the Mobiloud mobiloud-mobile-app-plugin plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2014-5344

Multiple cross-site scripting XSS vulnerabilities in the Mobiloud mobiloud-mobile-app-plugin plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2014-5344

The CVE refers to multiple XSS vulnerabilities in the Mobiloud WordPress plugin (mobiloud-mobile-app-plugin) prior to version 2.3.8. The underlying issue enables remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: Mobiloud plugin for WordPress; aff...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

CVE-2012-5344

CVE-2012-5344 affects IpTools’ Tiny TCP/IP Server (IpTools WebServer/Thttpd.bat 0.1.4). The connected data confirms a directory traversal vulnerability that allows remote reading of arbitrary files via a .. in an HTTP request. OpenVAS entries also reference a related remote buffer overflow for Ip...

CVE-2012-5344

Directory traversal vulnerability in the WebServer Thttpd.bat in IpTools aka Tiny TCP/IP server 0.1.4 allows remote attackers to read arbitrary files via a .. dot dot in a HTTP request...

IpTools Tiny TCP/IP Servers Remote Buffer Overflow Vulnerability

IpTools is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IpTools Tiny TCP/IP Servers Remote Buffer Overflow Vulnerability

This host is running IpTools and prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbiptoolsremotebofvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ IpTools Tiny TCP/IP Servers Remote Buffer Overflow Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Network...

CVE-2012-5344

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36513...

Sawmill < 7.2.18 Unspecified Cross-Site Scripting Vulnerability

Binary data 5344.prm...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

SLES10: Security update for IBM Java 1.4.2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-ibm java-142-ibm-devel java-142-ibm-jdbc java-142-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 10 patch...

SLES9: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040565 within...

SLES9: Security update for IBM Java5 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for IBM Java5 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for IBM Java2 JRE and SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-JRE IBMJava2-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...