Design/Logic Flaw

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...

CVE-2013-2367

CVE-2013-2367 concerns HP SiteScope (versions 11.20/11.21) with a vulnerability in the SOAP interface, allowing remote code execution via the runOMAgentCommand SOAP path. Connected sources confirm an RCE vector related to the SOAP handling and the runOMAgentCommand entry, with multiple references...

CVE-2013-2367

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678...

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection Persistent Cross-Site Scripting

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection Persistent Cross-Site Scripting...

OpenEMM-2013 8.10.380.hf13.0.066 Cross Site Scripting / SQL Injection

import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file:...

OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection / Stored XSS

Exploit for jsp platform in category web applications import os import sys from SOAPpy import WSDL from argparse import ArgumentParser from re import sub Exploit Title: OpenEMM 2013 SQL Injection / Stored XSS Date: 07/20/2013 Exploit Author: drone @dronesec More information and required WSDL file...

D-Link Devices UPnP SOAP Command Execution Vulnerability

Different D-Link Routers are vulnerable to OS command injection in the UPnP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the CMD target. Additionally, two targets are included, to start a telnetd service and establi...

D-Link Devices UPnP SOAP Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'D-Link Devices UPnP SOAP Command...

Updated python-suds package fixes security vulnerability

An insecure temporary directory use flaw was found in the way python-suds performed initialization of its internal file-based URL cache predictable location was used for directory to store the cached files. A local attacker could use this flaw to conduct symbolic link attacks, possibly leading to...

PT-2013-3603 · No Company Name Mentioned In The Text · Suds

Name of the Vulnerable Software and Affected Versions: Suds version 0.4 Description: The issue in Suds allows local users to potentially redirect SOAP queries and have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. This occurs when the tempdir...

Oracle Endeca Server Remote Command Execution

This module exploits a command injection vulnerability on the Oracle Endeca Server 7.4.0. The vulnerability exists on the createDataStore method from the controlSoapBinding web service. The vulnerable method only exists on the 7.4.0 branch and isn't available on the 7.5.5.1 branch. In addition, t...

SAP NetWeaver SOAP Request SXPG_COMMAND_EXECUTE Command Execution

A remote command execution vulnerability has been reported in SAP NetWeaver's SOAP interface. The vulnerability is due to insufficient validation of incoming SOAP requests. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted SOAP request to the affected...

ReadyMedia - Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/61282/info ReadyMedia is prone to a remote heap-based buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service...

Oracle Linux 5 : php (ELSA-2009-0338)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0338 advisory. - ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658 Tenable has extracted the preceding description block directly from the Oracle Linux...

Zoom Telephonics X4X5 ADSL Modem - Multiple Vulnerabilities

Zoom Telephonics X4X5 ADSL Modem - Multiple Vulnerabilities Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions...

Zoom X4 / X5 SQL Injection / Authentication Bypass Vulnerabilities

Zoom X4 and X5 modems suffers from authentication bypass and remote SQL injection vulnerabilities. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3...

Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Denial of service vulnerability product: Apache CXF vulnerable version: Apache CXF prior to 2.5.10, 2.6.7 and 2.7.4 fixed version: Apache CXF 2.5.10, 2.6.7 and 2.7.4...

Apache CXF 2.5.102.6.72.7.4 - Denial of Service

Apache CXF 2.5.102.6.72.7.4 - Denial of Service SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Denial of service vulnerability product: Apache CXF vulnerable version: Apache CXF prior to 2.5.10, 2.6.7 and 2.7.4 fixed...

D-Link DIR-300/600/645/845/865 OS-Command Injection via UPnP Interface

Exploit for hardware platform in category web applications Title: OS-Command Injection via UPnP SOAP Interface in multiple D-Link devices Vendor: D-Link Devices: DIR-300 rev B / DIR-600 rev B / DIR-645 / DIR-845 / DIR-865 ============ Vulnerable Firmware Releases: ============ DIR-300 rev B -...

D-Link - OS-Command Injection via UPnP Interface

Title: OS-Command Injection via UPnP SOAP Interface in multiple D-Link devices Vendor: D-Link Devices: DIR-300 rev B / DIR-600 rev B / DIR-645 / DIR-845 / DIR-865 ============ Vulnerable Firmware Releases: ============ DIR-300 rev B - 2.14b01 DIR-600 - 2.16b01 DIR-645 - 1.04b01 DIR-845 - 1.01b02...