Oracle GlassFish Server Multiple Vulnerabilities (April 2015 CPU) (POODLE)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities : - A flaw exists in the bundled cURL and libcurl packages. The certificate CN and SAN name field verification CURLOPTSSLVERIFYHOST is disabled when the digital signature verification...

Oracle GlassFish Server Administration Console Authentication Bypass - Ver2 (CVE-2011-1511)

An authentication bypass vulnerability has been reported in the administration console of Oracle GlassFish. The vulnerability is due to an error while processing HTTP TRACE requests. A remote attacker can exploit this vulnerability by sending a crafted TRACE request to the target. Successful...

Oracle GlassFish Server Unspecified Vulnerability (January 2015 CPU)

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability in the Admin Console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80949; scriptversion"1.10"; scriptcvsdate"Date: 2018/11/15 20:50:25"; scriptcveid"CVE-2015-0396...

Oracle GlassFish Server Admin Console Subware Arbitrary Code Execution Vulnerability

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. A security vulnerability in the Oracle GlassFish Enterprise Server management console widget allows remote attackers to exploit the vulnerability ...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

Removed by vendor...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

CVE-2015-0396 affects Oracle GlassFish Server 3.0.1 and 3.1.2, with an unspecified vulnerability in the Admin Console that could affect confidentiality, integrity, and availability. Public documents here do not describe the exact vulnerability vector or exploit details. Remediation per the connec...

Oracle GlassFish Server Remote Vulnerability

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. A remote vulnerability exists in Oracle GlassFish Server that allows attackers to exploit the 'HTTP' protocol to compromise the 'Admin Console'...

PT-2015-4607

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 through 3.1.2 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via unknown vectors related to the Admin Console. Recommendations For...

CVE-2015-0396: Undefined Security Weakness

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

Oracle GlassFish Server 3.0.1 / 3.1.2 / Enterprise 2.1.1 DoS

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the COBRA ORB subcomponent that could allow a remote attacker to cause a loss of availability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77556;...

GlassFish Brute Force Utility

This module attempts to login to GlassFish instance using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE options. It will also try to do an authentication bypass against older versions of GlassFish. Note: by default, GlassFish 4.0 requires HTTPS, which...

Oracle GlassFish Server Multiple Vulnerabilities (July 2014 CPU)

The version of GlassFish Server running on the remote host is affected by multiple vulnerabilities in the following components : - The implementation of Network Security Services NSS does not ensure that data structures are initialized, which could result in a denial of service or disclosure of...

Oracle GlassFish Server 3.1.1 (build 12) Multiple XSS

No description provided by source...

GlassFish Application Server resourceNode/jmsConnectionNew.jsf - Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...

Apache Struts ClassLoader Manipulation Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts ClassLoader Manipulation Remote Code Execution', 'Description' = %q This module...

PHP Hash Table Collision Proof Of Concept

No description provided by source. ! /usr/bin/env python This script was written by Christian Mehlmauer [email protected] https://twitter.com/!/FireFart Sourcecode online at: https://github.com/FireFart/HashCollision-DOS-POC Original PHP Payloadgenerator taken from...