CVE-2010-2639

CVE-2010-2639 affects IBM WebSphere Commerce Enterprise 7.0 prior to 7.0.0.2. The issue arises from access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, tied to caching of mutable objects and concurrency issues, enabling remote attackers to read messages intended for o...

CVE-2010-2639

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...

SAP NetWeaver MessagingServer — XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Messaging system from 7.10-7.30 Vendor URL: http://www.sap.com Bugs: Linked XSS and Stored XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 12.04.2011 Author: Alexandr Polyakov Description...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Directory traversal

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

CVE-2008-6308

CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...

Fedora Update for dbus FEDORA-2008-2043

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-2043 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Command injection

The Electronic Messaging System Microsoft Data Base EMSMDB32 provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service application outage via a malformed MAPI command, aka "Literal...

Nokia N95-8 (JPG File) Remote Crash PoC

No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...

Nokia N95-8 (JPG File) Remote Crash PoC

Exploit for hardware platform in category dos / poc ======================================= Nokia N95-8 JPG File Remote Crash PoC ======================================= Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3...

53KF online customer service system XSS vulnerability-vulnerability warning-the black bar safety net

Author: xushaopei About 53KF: Online customer service（WWW.53KF.COM is the leading site online customer service system, by the six degrees company, the investment founded, is committed to the achievement of the largest web dialogue tool provider. There have been 2 2 million site users in the use o...

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

PunBB Private Messaging System 1.2.x - Multiple Local File Inclusions ?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod...

PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit

No description provided by source. ?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/files.php?pid=52...

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

?php errorreporting0; iniset"defaultsockettimeout",5; / PunBB Private Messaging System 1.2.x Multiple LFI Exploit ----------------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/files.php?pid=52 download cms http://punbb.org...

Extmail security vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability description: ExtMail Project is an active open source messaging system project is currently by ExtMail team maintenance. The item in 2 0 0 5 years 9 on 1 8 November the official launch, initially in the WebMail software is based, has been gradually formed ExtMail software series. Th...

Unfixed XSS vulnerability at www.rentmore.us

Security researcher Uber0n, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.rentmore.us, which at the time of submission ranked 4742346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0

IRM, leaders in messaging systems security, have discovered six remote vulnerabilities in IBM WebSphere MQ 6.0. The vulnerabilities are currently being investigated by IBM and once patches have been developed, advisories will be published including full technical details and links to patch downlo...

D-Bus cross-application messaging system DoS

Vulnerability in matchruleequal allows application to remove rules of different applications...

ArGoSoft Mail Server Pro Webmail viewheaders Multiple Field XSS

The remote host is running ArGoSoft Mail Server Pro, a messaging system for Windows. According to its banner, the webmail server bundled with the version of ArGoSoft Mail Server Pro installed on the remote host fails to properly filter message headers before displaying them as part of a message t...

IA eMailServer IMAP SEARCH Command Remote Overflow

The remote host is running IA eMailServer, a commercial messaging system for Windows. The IMAP server bundled with the version of IA eMailServer installed on the remote host crashes when it receives a SEARCH command argument of 560 or more characters. An authenticated attacker could exploit this...