Lucene search
+L

9090 matches found

NVD
NVD
•added 2014/10/15 10:55 p.m.•33 views

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

3.5CVSS5.2AI score0.00789EPSS
SaveExploits0References2
Prion
Prion
•added 2014/10/15 10:55 p.m.•26 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

3.5CVSS5.7AI score0.00789EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2014/10/15 10:55 p.m.•27 views

Design/Logic Flaw

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

4.9CVSS5.6AI score0.00972EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/10/15 10:03 p.m.•66 views

CVE-2014-6487

CVE-2014-6487 is an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. The flaw is described as allowing remote authenticated users to affect integrity via unknown vectors related to End User Self Ser...

3.5CVSS5.4AI score0.00789EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2014/10/15 10:03 p.m.•43 views

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

5.2AI score0.00789EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2014/10/15 10:03 p.m.•37 views

CVE-2014-6557

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

5.1AI score0.00972EPSS
SaveExploits0References3
seebug.org
seebug.org
•added 2014/10/13 12:00 a.m.•40 views

Supesite 前台注入 #3 (Delete)

简要描述: Delete 如果ucenter和supesite在一个裤的话 可以尝试把uckey注入出来 然后…… 详细说明: 在cp.php中 $ac = empty$GET'ac' ? 'profile' : trim$GET'ac'; ifinarray$ac, array'index', 'news', 'profile', 'credit', 'models' includeonceSROOT.'./source/cp'.$ac.'.php'; 包含进来 在source/cpnews.php中 ifempty$itemid //这里让$itemid 不为空...

7AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/10/13 12:00 a.m.•336 views

PHPOK最新版前台SQL注入漏洞(可直接获取管理员密码)

简要描述: PHPOK最新版前台某功能存在SQL注入漏洞,可直接UNION注入获取管理员密码 详细说明: PHPOK4.1最新版(2014-08-18更新) 官网:http://www.phpok.com/phpok.html 官网演示站点:http://demo.phpok.com 这里先整理下PHPOK系统的前台数据处理流程: /framework/api/apicontrol.php = /framework/phpokcall.php = /framework/model/data.php PHPOK系统在前台获取“文章总数”的功能实现上存在SQL注入漏洞。...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/10/12 12:00 a.m.•35 views

Supesite 前台二次注入一枚

简要描述: 二次猪肉。 详细说明: 在cp.php中 $ac = empty$GET'ac' ? 'profile' : trim$GET'ac'; ifinarray$ac, array'index', 'news', 'profile', 'credit', 'models' includeonceSROOT.'./source/cp'.$ac.'.php'; 包含文件进来 在source/cpnews.php中 $newsarr = array'subject' = $POST'subject', 'catid' = $POST'catid', 'type' =...

7.1AI score
SaveExploits0
Cent OS
Cent OS
•added 2014/10/10 9:45 p.m.•94 views

krb5 security update

CentOS Errata and Security Advisory CESA-2014:1255 Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

8.5CVSS7AI score0.08085EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2014/10/09 4:07 p.m.•17 views

Shiro: successful authentication without specifying user name or password

It was discovered that Apache Shiro authenticated users without specifying a user name or a password when used in conjunction with an LDAP back end that allowed unauthenticated binds...

7.5CVSS5.7AI score0.05487EPSS
SaveExploits1References4
seebug.org
seebug.org
•added 2014/10/04 12:00 a.m.•113 views

DESTOON前台getshell

简要描述: 如题。。 详细说明: \module\know\answer.inc.php 143 - 161行 case 'raise': //这个功能是 "知道功能" 悬赏的次数更新,因为默认只允许2次提高悬赏的次数 if$credit $credit dalert$L'lackcredit', 'goback'; $couldraise = $couldadmin;//是否是 "知道"发布的作者. if$item'process' != 1 $couldraise = false; if$item'raise' = $MOD'maxraise' $couldraise = false...

7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/10/03 10:07 a.m.•30 views

Google Changes SafeSearch Option for Administrators

Google is removing a feature that allowed administrator to require their users to employ a search option that removes explicit content from search results. The decision is tied to the fact that the option required the use of an unsecured connection to Google, something that the company said allow...

7AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2014/10/01 6:10 p.m.•31 views

Shiro: successful authentication without specifying user name or password

It was discovered that Apache Shiro authenticated users without specifying a user name or a password when used in conjunction with an LDAP back end that allowed unauthenticated binds...

7.5CVSS5.7AI score0.05487EPSS
SaveExploits1References4
OSV
OSV
•added 2014/09/29 12:00 a.m.•60 views

DLA-66-1 apache2 - security update

Bulletin has no description...

6.8CVSS7AI score0.85744EPSS
SaveExploits7
seebug.org
seebug.org
•added 2014/09/21 12:00 a.m.•28 views

cmseasy 再次绕过前台sql盲注(无需登录)

简要描述: cmseasy 再次绕过前台sql盲注无需登录 详细说明: 我们直接进入: archiveact.php:611-628: function respondaction includeonce ROOT . '/lib/plugins/pay/' . front::$get'code' . '.php'; $payclassname = front::$get'code'; $payobj = new $payclassname; $uri = $SERVER"REQUESTURI"; $uriget = strstr$uri, '?'; $uriget =...

7AI score
SaveExploits0
rdot
rdot
•added 2014/09/06 12:00 a.m.•598 views

Retrieving all tables and their columns at once MSSQL

In the Name of ALLAH the Most Beneficent and the Merciful Zenodermus, Ch3rn0by1 and Me was workinn on MSSQL.. when Zenodermus thought to make a DIOS for MSSQL.. previously at Код: http://websec.ca/kb/sqlinjection DIOS is under the heading Retrieving Multiple Tables and Columns Код: AND 1=0; BEGIN...

7.2AI score
SaveExploits0
Cisco
Cisco
•added 2014/08/28 3:58 p.m.•36 views

Cisco 1800 Series ISR ISDN Basic Rate Interface Denial of Service Vulnerability

Cisco 1800 Series Integrated Services Routers ISR contain a vulnerability in the hardware entropy collection module when the Integrated Services Digital Network ISDN Basic Rate Interface BRI is configured and connected to a public switched network. This could allow an attacker with knowledge of t...

5.4CVSS6.2AI score0.00976EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2014/08/21 12:00 a.m.•36 views

phpyun设计缺陷可用别的账户money付款,清空别的账户money为0

简要描述: 后台在处理订单的时候,直接获取cookie中的uid,此uid可以伪造成他人的uid,导致可用他人的money付款。 经过测试,虽然自己并不能获得支付成功的积分,但是可以扣除他人账户余额。 详细说明: 漏洞文件\api\tenpay\index.php: $sql=$db-query"select from ".$dbconfig"def"."companyorder where orderid='$POSTdingdan'"; $row=mysqlfetcharray$sql; //通过订单编号获取点单价格 $userid=int$COOKIE'uid';...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/08/19 1:00 p.m.•15 views

Facebook Says 95 Percent of Notification Email Encrypted

All that’s missing from the organic encrypt the web movement seems to be a hashtag. Otherwise, no one can accuse major web providers of slacking as leading players such as Microsoft and Yahoo, prompted by the Snowden leaks, have made noteworthy leaps in the last 15 months to encrypt everything fr...

0.2AI score
SaveExploits0References8
Rows per page
Query Builder