CVE-2015-2165

CVE-2015-2165 covers multiple stored/reflected XSS flaws in Ericsson Drutt MSDP Report Viewer (versions 4.x–6.x). The vulnerabilities allow remote attackers to inject arbitrary script/HTML via a large set of parameters across various JSP pages (top-links.jsp, page-summary.jsp, service-summary.jsp...

Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal Vulnerability

Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal

Ericsson Drutt MSDP Instance Monitor - Directory Traversal +------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal

+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Ericsson Drutt MSDP (Instance Monitor) Directory Traversal / File Access

+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Ericsson Drutt MSDP (Report Viewer) Cross Site Scripting

+----------------------------------------------------------------------+ + Ericsson Drutt MSDP Report Viewer - Cross Site Scripting Injection + +----------------------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP Report Viewer Vendor Homepage :...

Ericsson Drutt MSDP (3PI Manager) Cross Site Scripting

+p-------------------------------------------------------------------+ + Ericsson Drutt MSDP 3PI Manager - Cross Site Scripting Injection + +--------------------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP 3PI Manager Vendor Homepage : www.ericsson.com...

Ericsson Drutt MSDP (3PI Manager) Open Redirect

+------------------------------------------------------+ + Ericsson Drutt MSDP 3PI Manager - Open Redirection + +------------------------------------------------------+ Affected Product: Ericsson Drutt MSDP 3PI Manager Vendor Homepage : www.ericsson.com Version : 4, 5 and 6 CVE v2 Vector :...

[SECURITY] Fedora 21 Update: erlang-17.4-1.fc21

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

[SECURITY] Fedora 20 Update: erlang-R16B-03.10.fc20

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

Total Multimedia Features DoS PoC for Sony Ericsson Phones

No description provided by source. Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a .sest extension, it achieves System File status.This file...

Sony Ericsson P900 Beamer Malformed File Name Handling Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13782/info Sony Ericsson P900 handset is affected by a remote denial of service vulnerability. This issue arises because the application fails to perform boundary checks prior to copying user-supplied data into a finite...

Ericsson HM220dp DSL Modem World Accessible Web Administration Interface Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any...

Broadcom DoS on BCM4325 and BCM4329 devices

1. Advisory Information Title: Broadcom DoS on BCM4325 and BCM4329 devices Advisory ID: CORE-2012-0718 Advisory URL: http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 Date published: 2012-10-23 Date of last update: 2012-10-23 Vendors contacted: Broadcom Corporation...

iAuto Mobile Application 2012 Multiple Vulnerabilities

Exploit for php platform in category web applications iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Introduction: ============= With Internet on mobile devices booming, having a desktop-oriented version is just not enough anymore. Empower your visitors with content designed for...

Erlang/OTP SSH library uses a weak random number generator

Overview The Erlang/OTP SSH library's random number generator is not cryptographically strong because it relies on predictable seed material. Description Geoff Cant's report states:The Erlang/OTP ssh library implements a number of cryptographic operations that depend on cryptographically strong...

Sony Ericsson Got Hacked by Idahc - Lebanese hacker

Sony Ericsson Got Hacked by Idahc - Lebanese hacker ! Again, DAMN ... Whats Going on with Sony ?.. Idahc , A Lebanese hacker hack The database of ca.eshop.sonyericsson.com with a simple sql injection. Two attacks on Sony in one day. Today's Morning LulzSec Leak Sony's Japanese websites Database a...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total MultiMedia Features - Sony Ericsson Phones Denial of Service PoC Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it...

Total Multimedia Features DoS PoC for Sony Ericsson Phones

Exploit for unknown platform in category dos / poc ========================================================== Total Multimedia Features DoS PoC for Sony Ericsson Phones ========================================================== Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should wo...

Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

Total Multimedia Features DoS PoC for Sony Ericsson Phones. Should work on almost all of their Models By Aodrulez. In Sony Ericsson phonestested on w800i,k750i,w810i, if you simply rename a File with a ".sest" extension, it achieves "System" File status.This file can't be deleted, nor renamed or...