CVE-2008-1725: Undefined Security Weakness

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

ibiz-insecure.txt

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

No description provided by source. -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it ...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit ====================================================================...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities

Sitebar = 3.3.5 Remote File Include Vulnerabilities D.Script: http://scripts.ringsworld.com/bookmark-management/sitebar-3.3.5.zip -::AUTHOR: VerY-SecReT Homepage: http://www.sniper-sa.com Exploit: :- target/sitebar/index.php?writerFile=Shell target/sitebar/Integrator.php?file=Shell $Includer:...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to 1 Application Object Library APPS01, 2 Human Resources APPS03, 3 Payables APPS04, 4 Trading Community Architecture APPS05, and 5 Web Applications Desktop...

CVE-2007-0290

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to 1 Application Object Library APPS01, 2 Human Resources APPS03, 3 Payables APPS04, 4 Trading Community Architecture APPS05, and 5 Web Applications Desktop...

CVE-2006-0704

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, we...

Code injection

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, we...

CVE-2006-0704

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, we...

CVE-2006-0704

The CVE-2006-0704 vulnerability affects iE Integrator 4.4.220114. When configured without a bespoke error page in acm.ini, remote attackers can access a non-existent .aspx script under integrator/apps to trigger an error page that reveals sensitive information, including the installation path, we...

CVE-2006-0704: Undefined Security Weakness

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, we...

Shiva Integrator Default Password (Telnet)

The remote Shiva router uses the default password. This means that anyone who has downloaded a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection. SPDX-FileCopyrightText: 2000 Stefaan Van Dooren Some text descriptions might be...

CVE-2001-0528

The CVE-2001-0528 entry affects Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x, where a debug version of FNDPUB11I.DLL logs the APPS schema password in cleartext to a debug file. This enables local users to obtain the password and gain privileges. The availa...

CVE-2001-0528

Oracle E-Business Suite Release 11i Applications Desktop Integrator ADI version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges...

CVE-2001-0528: Undefined Security Weakness

Oracle E-Business Suite Release 11i Applications Desktop Integrator ADI version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges...

CVE-1999-1151

CVE-1999-1151 affects the Compaq/Microcom 6000 Access Integrator. The issue is that the device does not time out sessions after prompting for credentials, enabling remote parties to cause a denial of service by connecting without providing a username or password. The provided documents do not spe...

CVE-1999-1152

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack...