53 matches found
[SECURITY] Fedora 24 Update: springframework-amqp-1.3.9-4.fc24
The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...
APNs Communication Fails
Device APNS communication fails. The following error is reported: INFO com.sparus.nps.ios.push.ApnsHandler - Not using APNS connection pool WARN com.sparus.nps.ios.push.ApnsHandler - Sending message to APNS failed...
RedHat Update for openchange RHSA-2013:0515-02
Check for the Version of openchange OpenVAS Vulnerability Test RedHat Update for openchange RHSA-2013:0515-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
shopex front Desk ordinary users getshell the latest vulnerability-vulnerability warning-the black bar safety net
Use method: First: think of a way to find the target site's absolute path http://www.wooyun.in/install/svinfo.php?phpinfo=true http://www.wooyun.in/core/api/shopapi.php http://www.wooyun.in/core/api/site/2.0/apib2b20cat.php http://www.wooyun.in/core/api/site/2.0/apib2b20goodstype.php...
IPhone TreasonSMS - HTML Inject & File Include Vulnerability
Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...
http-icloud-sendmsg NSE Script
Sends a message to a iOS device through the Apple MobileMe web service. The device has to be registered with an Apple ID using the Find My Iphone application. Script Arguments http-icloud-sendmsg.username the Apple ID username http-icloud-sendmsg.sound boolean specifying if a loud sound should be...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in MyBB aka MyBulletinBoard 1.2.2 allows remote attackers to send messages to arbitrary users. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by 1 posting a blog, 2 posting a listing, 3 posting an event, 4 adding comments, or 5 sending a message...
CVE-2006-2564
Multiple cross-site scripting XSS vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by 1 posting a blog, 2 posting a listing, 3 posting an event, 4 adding comments, or 5 sending a message...
CVE-2006-2564
Multiple cross-site scripting XSS vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by 1 posting a blog, 2 posting a listing, 3 posting an event, 4 adding comments, or 5 sending a message...
Mandrake Linux Security Advisory : dbus (MDKSA-2005:105)
Dan Reed discovered a vulnerability in the D-BUS system for sending messages between applications. He found that a user can send and listen to messages on another user's per-user session bus if they knew the address of the socket. The updated packages have been patched to correct this problem...
Siemens S55 - Cellular Telephone Sms Confirmation Message Bypass
source: https://www.securityfocus.com/bid/10227/info Reportedly the Siemens S55 is affected by an SMS confirmation message bypass vulnerability. This issue is due to a race condition error that allows a malicious programmer to send SMS messages from unsuspecting cellular telephone user's telephon...
Microsoft Windows Alerter Service Social Engineering Weakness
The alerter service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by an attacker who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack C Tenable Network Security, Inc...