lisa-1688.com.tw Cross Site Scripting vulnerability OBB-3081815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

iyfipgun.com XSS vulnerability

Open Bug Bounty ID: OBB-618376 Description| Value ---|--- Affected Website:| iyfipgun.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-8698

CA Release Automation (formerly LISA Release Automation) is affected by an XML External Entity (XXE) issue. The vulnerability allows a remote attacker to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration with an entity reference. Affecte...

CA LISA Release Automation multiple security vulnerabilities

XSS, CSRF, SQL injection...

CVE-2014-8247

CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 contains an XSS vulnerability (CVE-2014-8247) caused by insufficient input filtering. Remote attackers could inject arbitrary script/HTML via unspecified vectors, potentially affecting users’ sessions. CA’s security n...

CA LISA Release Automation contains multiple vulnerabilities

Overview CA LISA Release Automation 4.7.1.385 contains multiple vulnerabilities Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2014-8246CA LISA Release Automation 4.7.1.385 contains a global Cross-Site Request Forgery CSRF vulnerability. The application allows a malicious user to...

LISa Detection

The remote service is a LISa server LAN Information Server, which provides a list of nearby hosts, like a 'network neighborhood', but based solely on TCP/IP. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid33200;...

Debian Security Advisory DSA 214-1 (kdenetwork)

The remote host is missing an update to kdenetwork announced via advisory DSA 214-1. OpenVAS Vulnerability Test $Id: deb2141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 214-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] Fedora 7 Update: kdenetwork-3.5.8-6.fc7

Networking applications, including: kget: downloader manager kiolan: lan browsing kio slave knewsticker: RDF newsticker applet kopete: chat client kppp: dialer and front end for pppd krdc: a client for Desktop Sharing and other VNC servers krfb: Desktop Sharing server, allow others to access your...

Mandrake Linux Security Advisory : kdenetwork (MDKSA-2002:080)

The SuSE security team discovered two vulnerabilities in the KDE lanbrowsing service during an audit. The LISa network daemon and 'reslisa', a restricted version of LISa are used to identify servers on the local network by using the URL type 'lan://' and 'rlan://' respectively. A buffer overflow...

CVE-2002-1306

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow 1 local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and 2 remote attackers to execute arbitrary code via a certain "lan://" URL...

CVE-2002-1247

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon...

CVE-2002-1306

CVE-2002-1306 corresponds to buffer overflow vulnerabilities in KDE’s LISa network services. The issues affect the LISa daemon used for LAN discovery (local network) and the LAN URL handler, allowing both local and remote attackers to potentially execute arbitrary code. Public references from SUS...

CVE-2002-1306: Undefined Security Weakness

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow 1 local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and 2 remote attackers to execute arbitrary code via a certain "lan://" URL...

CVE-2002-1247

Buffer overflow in LISa/LISa-derived resLISa (KDE LAN browsing) allows local users to exploit through an overly long LOGNAME environment variable, enabling control of the resLISa process or related access. The vulnerability is triggered during parsing of LOGNAME, and exposed both in LISa and its ...

CVE-2002-1247: Undefined Security Weakness

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon...