Cubic CMS SQL Injection / LFI / Path Disclosure

I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals of any size, powerful, adaptable to any graphic design that allows users administration 100% professional but simple at the same time that website. II. VULNERABILITIES...

CVE-2013-6718: Undefined Security Weakness

The Advanced Management Module AMM with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface...

PT-2013-6099

Name of the Vulnerable Software and Affected Versions Advanced Management Module AMM versions 3.64B, 3.64C, 3.64G Description The issue allows remote attackers to discover account names and passwords via an unspecified interface. Recommendations For Advanced Management Module AMM versions 3.64B,...

Hewlett-Packard Intelligent Management Center BIMS UploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet in the Branch Intelligent Management...

CVE-2013-4007

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4007: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4786

Name of the Vulnerable Software and Affected Versions IBM BladeCenter systems with Advanced Management Module AMM firmware versions prior to BBET64G and BPET64G Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could...

PT-2013-4806

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM and Integrated Management Module II IMM2 affected versions not specified Description The issue concerns the RAKP protocol support in the Intelligent Platform Management Interface IPMI implementation, which send...

PT-2013-4807

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers affected versions not specified Description The issue concerns the Intelligent Platform Management Interface IPMI implementation in...

CVE-2013-4031: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...

CVE-2013-4038: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

OpenJDK: CMM malformed raster memory corruption (2D, 8007675)

The color management CMM functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service crash via an image with crafted raster parameters, which...

OpenJDK: CMM malformed raster memory corruption (2D, 8007675)

The color management CMM functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service crash via an image with crafted raster parameters, which...

PT-2012-5602

Name of the Vulnerable Software and Affected Versions IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 affected versions not specified Description The issue allows local users to obtain sensitive information, including local accounts, SSH private keys, SSL/TLS...

CVE-2012-4838: Undefined Security Weakness

IBM Flex System Chassis Management Module CMM and Integrated Management Module 2 IMM2 allow local users to obtain sensitive information about 1 local accounts, 2 SSH private keys, 3 SSL/TLS private keys, 4 SNMPv3 communities, and 5 LDAP credentials by leveraging unspecified side effects of servic...

CentOS Update for kernel CESA-2011:0833 centos5 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2011:0833 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[security bulletin] HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03249176 Version: 1 HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CentOS Update for kernel CESA-2011:0833 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability

VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Java is a programming language and computing platform released by Sun Microsystems now Oracle. It is the...