PT-2017-14527

Name of the Vulnerable Software and Affected Versions SAP BASIS versions 7.00 through 7.02 SAP BASIS versions 7.10 through 7.11 SAP BASIS version 7.30 SAP BASIS version 7.31 SAP BASIS version 7.40 SAP BASIS versions 7.50 through 7.52 Description The issue concerns the SAP Note Assistant tool, whi...

CVE-2017-16682: Improper Control of Generation of Code

SAP NetWeaver Internet Transaction Server ITS, SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application...

SAP Netweaver 2004s SAP_BASIS and SAP_ABA Component Message Forgery Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. An information forgery vulnerability exists in the SAPBASIS and SAPABA components in SAP Netweaver 2004s, version 7.00 SP Level 0031, which can be exploited by a remote attacker to forge an IP...

Germany Bans Facebook From Collecting WhatsApp Data

Just last month, the most popular messaging app WhatsApp updated its privacy policy and T&Cs to start sharing its user data with its parent company, and now both the companies are in trouble, at least in Germany and India. Both Facebook, as well as WhatsApp, have been told to immediately stop...

SAP ABAP BASIS 7.4 Hard-Coded Password

Application: SAP DBAP BASIS Versions Affected: SAP DBAP BASIS 7.4 Vendor URL: http://SAP.com Bugs: Hardcoded credentials Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 10.05.2016 Reference: SAP Security Note 2292487 Author: Vahagn Vardanyan ERPScan...

Sql injection

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 evo device Version affected:...

CVE-2014-3130

Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.

Martin Roesch on Snort's History and the Sourcefire Acquisition

Dennis Fisher talks with Martin Roesch, the author of the Snort IDS and founder of Sourcefire, about the evolution of Snort from a side project to an open-source security powerhouse to the technological basis for a hugely successful company. Download: digitalunderground119 Subscribe to the Digita...

CVE-2013-3063

SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2013-3063

SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2013-3063

CVE-2013-3063 affects SAP BASIS Communication Services (versions 4.6B–7.30). The vulnerability enables remote OS command execution on the SAP system with the rights of the SAP application user, exploitable via remote interfaces (RFC/SOAP) with authentication required. Exploitation details and an ...

PT-2013-4133

Name of the Vulnerable Software and Affected Versions SAP BASIS Communication Services versions 4.6B through 7.30 Description The issue allows remote authenticated users to execute arbitrary commands. Recommendations For versions 4.6B through 7.30, update to a version that contains a fix for this...

CVE-2013-3063: Undefined Security Weakness

SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2011-5158

Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...

CVE-2011-5158

Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...

CVE-2011-5158

Multiple untrusted search path vulnerabilities affect DATEV Grundpaket Basis CD23.20, specifically the DMTGUI2.EXE and DvInesLogFileViewer.Exe components. The issue allows local privilege escalation via a Trojan horse mechanism using one of two DLLs in the current working directory: DVBSKNLANG101...