Design/Logic Flaw

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6686

CVE-2014-6686 affects Zoho Books - Accounting App (com.zoho.books) for Android, version 3.1.9, where the app does not verify X.509 certificates from SSL servers. This permits MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents reiter...

Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities

No description provided by source. Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected...

Front Accounting 2.3.4 CSRF Vulnerability

No description provided by source. Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista +...

Cisco Secure ACS for Windows NT 3.0 Cross-site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5026/info Cisco Secure ACS is an access control and accounting server system. It is distributed and maintained by Cisco, and in this vulnerability affects implementations on the Microsoft Windows NT platform. It has been...

Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities

No description provided by source. Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Front Accounting Internal Cybsec Advisory Id: 2010-1001-Multiple Persistent XSSs in Front Accounting Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 10/29/2010 Affected...

Intel Corporation Shiva Access Manager 5.0 Solaris World Readable LDAP Password

No description provided by source. source: http://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a...

YASAT - Yet Another Stupid Audit Tool

YASAT Yet Another Stupid Audit Tool is a simple stupid audit tool. Its goal is to be as simple as possible with minimum binary dependencies only sed, grep and cut Second goal is to document each test with maximum information and links to official documentation. It do many tests for checking...

CVE-2014-3276

Cisco Identity Services Engine ISE 1.2.1 patch 2 and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service RADIUS outage by sourcing these packets...

PT-2019-5753 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.10.x through 4.18.x Description: The issue is related to the SCTP socket buffer used by a userspace application not being accounted for by the cgroups subsystem. This can be exploited to cause a denial of service attac...

FrontAccounting 'attachments.php'任意文件上传漏洞

Bugtraq ID:66217 FrontAccounting FA是一个针对企业ERP供应链的网页会计系统。 FrontAccounting /admin/attachments.php脚本存在安全漏洞，允许攻击者上传使用恶意扩展名的文件，并以WEB权限执行。 0 FrontAccounting 2.x FrontAccounting 2.3.20已经修复该漏洞，建议用户下载更新： http://frontaccounting.com...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

Threat Outbreak Alert: Fake Accounting Form Email Messages on November 15, 2013

Medium Alert ID: 31791 First Published: 2013 November 16 03:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an accounting form for the recipient. The text in the email message attempts to convince the recipient to ope...

mod_accounting Module 0.5 - Blind SQL Injection

modaccounting Module 0.5 - Blind SQL Injection - Affected Vendor: http://sourceforge.net/projects/mod-acct/files/ - Affected Software: modaccounting - Affected Version: 0.5. Other earlier versions may be affected. - Issue type: Blind SQL injection - Release Date: 20 Sep 2013 - Discovered by: Elda...

[SECURITY] Fedora 18 Update: php-pecl-radius-1.2.7-1.fc18

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

[SECURITY] Fedora 17 Update: php-pecl-radius-1.2.7-1.fc17

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

Fedora Update for php-pecl-radius FEDORA-2013-11992

Check for the Version of php-pecl-radius OpenVAS Vulnerability Test Fedora Update for php-pecl-radius FEDORA-2013-11992 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for php-pecl-radius FEDORA-2013-11998

Check for the Version of php-pecl-radius OpenVAS Vulnerability Test Fedora Update for php-pecl-radius FEDORA-2013-11998 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2013-2777

sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling...