177 matches found
vianet.com.np XSS vulnerability
Vulnerable URL: https://www.vianet.com.np/sme-plan-form/?product=FiberNet-Infinite-OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134792 VIP website status:| No Check...
Debian DLA-260-1 : hostapd security update
A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to perform denial of service attacks by an attacker that is within radio...
Updated hostapd packages fix a security vulnerability
Updated hostapd packages fix security vulnerability: A vulnerability was found in hostapd that can be used to perform denial of service attacks by an attacker that is within radio range of the AP that uses hostapd for MLME/SME operations...
CVE-2014-7314
The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7314
The CVE-2014-7314 entry concerns the Android app “The Intelligent SME” (com.magzter.intelligentsme) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive information via a crafted ce...
CVE-2014-7314
The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Scriptme SmE 1.21 File Mailer Login SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22081/info SmE File Mailer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Incapsula - Essential Cloud based Security Solution for your Website
Over 2011-2012 we've seen an increase in distributed denial-of-service DDoS attacks and other web attacks on SME's websites. Incapsula is one of the companies whose service is useful to protect your website from all threats and mitigate DDoS attacks which affect your websites, servers, databases,...
Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net
by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...
Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net
From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...
Cow CMS, SME website management system upload vulnerability and fix-vulnerability warning-the black bar safety net
Cow CMS is in the enterprise retail network is designed for SME website development website management system, The Company's business scope covers Internet security software systems and Internet Security Systems Development, Business website planning, web design, hosting, website maintenance,...
Unfixed XSS vulnerability at www.smelearning.org.tw
Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.smelearning.org.tw, which at the time of submission ranked 310330 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...
Unfixed XSS vulnerability at www.sme-web.net
Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...
smefilemailer-sql.txt
-=--------------------ADVISORY-------------------=- SmE FileMailer 1.21 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: SmE FileMailer -=+ Version: 1.21 -=+ Vendor's URL: http://www.scriptme.com/down/13 -=+ Platform: Windows\Linux\Unix -=+ Bu...
CVE-2007-0350
Multiple SQL injection vulnerabilities in a index.php and b dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ps, 2 us, 3 f, or 4 code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346...
CVE-2007-0350
CVE-2007-0350 describes multiple SQL injection vulnerabilities in SmE FileMailer 1.21 and earlier, affecting index.php and dl.php. The flaw allows remote attackers to inject SQL via the (1) ps, (2) us, (3) f, or (4) code parameters, with the us parameter in index.php already covered by CVE-2007-0...
CVE-2007-0350
Multiple SQL injection vulnerabilities in a index.php and b dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ps, 2 us, 3 f, or 4 code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346...
CVE-2007-0339
SQL injection vulnerability in index.php aka the login form in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field ps parameter. NOTE: some of these details are obtained from third party information...