MSC Cruises - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MSC Cruises published at the 'play' market has multiple vulnerabilities...

cyberjaya-msc.com XSS vulnerability

Vulnerable URL: http://cyberjaya-msc.com/pdpa/unsubscribe.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Microsoft Management Console Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft Windows Management Console's handling of the special '.msc' file allows an attacker to exploit the vulnerability to trick users into loading the file for a denial-of-service attack...

CVE-2015-1681

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service via a crafted .msc file, aka "Microsoft Management Console File Format Denial of...

Microsoft Management Console File Format Denial of Service (MS15-054; CVE-2015-1681)

A denial of service vulnerability has been reported in Microsoft Management Console. The vulnerability exists when Windows attempts to access a specially crafted .msc file to retrieve the icon information, and then fails to properly validate a destination buffer. A remote attacker can exploit thi...

MS15-054: Vulnerability in Microsoft Management Console file format could allow denial of service: May 12, 2015

None None...

Important: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 update

Red Hat JBoss BPM Suite 6.0.3, which fixes multiple security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.1 and fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Command injection

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Code injection

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5872

Affected product: Nortel Mult imedia Communication Server (MSC) 5100, IPCM component, specifically the UNIStim File Transfer Protocol (UFTP) processing. Vulnerability details: Multiple unspecified issues in UFTP handling allow remote attackers to trigger a denial of service (device outage) by sen...

CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...