vianet.com.np XSS vulnerability

Vulnerable URL: https://www.vianet.com.np/sme-plan-form/?product=FiberNet-Infinite-OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134792 VIP website status:| No Check...

Debian DLA-260-1 : hostapd security update

A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to perform denial of service attacks by an attacker that is within radio...

CVE-2015-4142: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service crash via a crafted frame, which triggers an out-of-bounds read...

Updated hostapd packages fix a security vulnerability

Updated hostapd packages fix security vulnerability: A vulnerability was found in hostapd that can be used to perform denial of service attacks by an attacker that is within radio range of the AP that uses hostapd for MLME/SME operations...

PT-2015-7907

Name of the Vulnerable Software and Affected Versions hostapd affected versions not specified Description A vulnerability was found in hostapd that can be used to perform denial of service attacks by an attacker within radio range of the AP that uses hostapd for MLME/SME operations. Recommendatio...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7314

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7314

The CVE-2014-7314 entry concerns the Android app “The Intelligent SME” (com.magzter.intelligentsme) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive information via a crafted ce...

PT-2014-7897

Name of the Vulnerable Software and Affected Versions The Intelligent SME application version 3.0 for Android Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-7314: Undefined Security Weakness

The Intelligent SME aka com.magzter.intelligentsme application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Scriptme SmE 1.21 File Mailer Login SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22081/info SmE File Mailer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Incapsula - Essential Cloud based Security Solution for your Website

Over 2011-2012 we've seen an increase in distributed denial-of-service DDoS attacks and other web attacks on SME's websites. Incapsula is one of the companies whose service is useful to protect your website from all threats and mitigate DDoS attacks which affect your websites, servers, databases,...

Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net

by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...

Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...

Cow CMS, SME website management system upload vulnerability and fix-vulnerability warning-the black bar safety net

Cow CMS is in the enterprise retail network is designed for SME website development website management system, The Company's business scope covers Internet security software systems and Internet Security Systems Development, Business website planning, web design, hosting, website maintenance,...

Unfixed XSS vulnerability at www.smelearning.org.tw

Security researcher PD, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.smelearning.org.tw, which at the time of submission ranked 310330 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is...

Unfixed XSS vulnerability at www.sme-web.net

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.sme-web.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

smefilemailer-sql.txt

-=--------------------ADVISORY-------------------=- SmE FileMailer 1.21 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: SmE FileMailer -=+ Version: 1.21 -=+ Vendor's URL: http://www.scriptme.com/down/13 -=+ Platform: Windows\Linux\Unix -=+ Bu...

CVE-2007-0350

Multiple SQL injection vulnerabilities in a index.php and b dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ps, 2 us, 3 f, or 4 code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346...