Multiple vulnerabilities in FireStats

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Authorization, Information Leakage, Insufficient Anti-automation, Denial of Service и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Insufficient Authorization и Information Leakage:...

CVE-2008-1811: Undefined Security Weakness

Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows030000.wwvexecuteimmediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher...

Multiple BeaWeblogic bugs

Weak JNDI trees protection, insufficient authorization for few weblogic.Admin methods, weak resource protection thorugh web.xml on case-insensitive filesystems, utilities passwords stored in cleartext, cleartext password leaked during reboot, technical information leak, logon with disabled...