288 matches found
大汉互动网络平台 /lm/front/api/opr_datacall.jsp 参数vc_id SQL注入漏洞
No description provided by source...
If we stand still, we go backwards
Recently, ppk claimed the web is going too fast in the wrong direction, and asked for a year's moratorium on web features. I was so angry I ran straight to a dictionary to find out what "moratorium" meant. Turns out it means "suspension". I got a bit snarky about it on Twitter, which isn't really...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...
RHEL 6 : JBoss EWP (RHSA-2013:0195)
Updated JBoss Enterprise Web Platform 5.2.0 packages that fix multiple security issues, various bugs, and add several enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
RHEL 4 / 5 / 6 : JBoss EWP (RHSA-2014:1320)
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...
RHEL 6 : Red Hat JBoss Enterprise Web Platform 5.2.0 (RHSA-2014:0898)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0898 advisory. Red Hat JBoss Enterprise Web Platform is a platform for Java applications, which integrates the JBoss Web Server with JBoss Hibernate and JBoss Seam...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
Updated packages for Red Hat JBoss Enterprise Web Platform 5.2.0 that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
An update for Red Hat JBoss Enterprise Web Platform 5.2.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
信游科技页游平台程序通用型SQL注入（一个文件多处）
简要描述： 看了@wefgod 大牛以前提交的 有空看了看这套代码 又发现了注入 官网几套系统都存在通用性注入漏洞 只是有安全狗 本人很菜不会过狗 但是漏洞是存在的 详细说明： 存在漏洞的文件： xykj/jsondata.ashx 三个分支 都存在注入 源码如下 using System; using System.Collections.Generic; using System.Collections.Specialized; using System.Web; using com.xykj.common; /// /// 请求处理 /// 发送到客户端为json格式。 ///...
CVE-2011-4610
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service infinite loop via vectors related to a crafted UTF-8 and a...
CVE-2011-4610
CVE-2011-4610 affects JBoss Web (used in Red Hat JBoss Communications Platform, Enterprise Web Platform, and Enterprise Application Platform) where a crafted UTF-8 surrogate pair at the boundary of an internal buffer can cause a denial of service (infinite loop). Connected advisories note Red Hat...
MediaWiki <= 1.22.1 PdfHandler Remote Code Execution Exploit
Exploit for multiple platform in category web applications MediaWiki images/xnz.php 3. access to php-backdoor! http://vulnerable-site/images/xnz.php?1=rm%20-rf%20%2f%20--no-preserve-root 4. happy pwning!! Related files: thumb.php -- extract all GET array to params...
Wikipedia Remote Execution Vulnerability Patched
A serious remote code execution vulnerability was recently patched by the Wikimedia Foundation. The flaw could have put at risk any of the foundation’s sites running MediaWiki software, including Wikipedia. Researchers within Check Point Software Technologies’ Vulnerability Research Group...
信游科技页游平台程序通用型SQL注入漏洞
简要描述： 某页游平台通用型SQL注入漏洞，可直接提权服务器，涉及页游平台数十个。全是企业站点，涉及资金交易。 详细说明： 今天是我第一次用sqlmap，没钱买电脑，也装不了backtrack 存在漏洞站点：http://www.52xinyou.cn/anli.htm 都在这个客户案例里面，17188不存在这个页面的漏洞。但是我不保证其他页面不存在。 本次渗透测试站点：http://www.teiyi.com/，对不起，让你受苦了。 sql注入地址：http://www.teiyi.com/payment/yeemobile.aspx?code=UNICOM 充值页面 直接sqlmap...
CVE-2013-4210
The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service file descriptor consumption via...
Moderate: Red Hat Security Advisory: jboss-remoting security update
An update for the JBoss Remoting component of Red Hat JBoss Web Platform 5.2.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: jboss-remoting security update
An updated jboss-remoting package that fixes one security issue is now available for Red Hat JBoss Web Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS...
Moderate: Red Hat Security Advisory: xml-security security update
An updated xml-security package that fixes one security issue is now available for Red Hat JBoss Web Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS bas...