SAP NetWeaver Business Communication Broker - multiple XSS

Application: SAP NetWeaver Vendor URL: Bugs: Multiple XSS Risk: High Exploits: YES Reported: 09.12.2011 Vendor response: 10.12.2011 Date of Public Advisory: 20.01.2012 Reference: SAP Security Note 1585652 Description SAP NetWeaver Business Communication Broker has multiple linked XSS vulnerabilie...

cumin: broker username/password appears in the log file

Cumin in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker...

cumin: broker username/password appears in the log file

Cumin in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker...

HP OpenView Communication Broker arbitrary files deletion

Arbitrary files deletion via TCP/383 service...

Arbitrary files deletion in HP OpenView Communication Broker

Luigi Auriemma Application: HP OpenView Communication Broker http://www8.hp.com/us/en/software/enterprise-software.html Versions: ovbbccb.exe = 11.0.43.0 Platforms: Windows, Linux, Solaris, HP-UX, AIX Bug: arbitrary files deletion Exploitation: remote, versus server Date: 27 Jun 2011 found 01 Jun...

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection

Dukascopy: Forex Swiss Bank Vulnerable to SQL Injection SQL Injection Vulnerability found in Dukascopy by zSecure Team. Dukascopy offers direct access to the Swiss Foreign Exchange Marketplace. This market provides the largest pool of ECN spot forex liquidity available for banks, hedge funds, oth...

CVE-2010-4179

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...

CVE-2010-4356

SQL injection vulnerability in newsdefault.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter...

Sql injection

SQL injection vulnerability in newsdefault.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter...

CVE-2010-4356

CVE-2010-4356 affects Site2Nite Big Truck Broker: SQL injection in news_default.asp via the txtSiteId parameter, enabling remote arbitrary SQL execution. Root cause: input from txtSiteId is not properly validated, allowing crafted queries. Affected component: news_default.asp; software: Site2Nite...

CVE-2010-4356

SQL injection vulnerability in newsdefault.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter...

Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability

Exploit for asp platform in category web applications ================================================================== Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability ================================================================== 0day.today 2018-03-19...

Site2Nite Big Truck Broker SQL Injection

...

Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection

...

Site2Nite Big Truck Broker - txtSiteId SQL Injection

Site2Nite Big Truck Broker - txtSiteId SQL Injection...

OpenJDK corba reflection vulnerabilities (6891766,6925672)

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Octobe...

CVE-2009-5006

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service NULL pointer...

Real Estate Broker(in ISRAEL) <= Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== Real Estate Brokerin ISRAEL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.co...

CentOS 5 : java-1.6.0-openjdk (CESA-2010:0768)

Updated java-1.6.0-openjdk packages that fix several security issues and two bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

qpid: crash when redeclaring the exchange with specified alternate_exchange

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service NULL pointer...