broadcast-wsdd-discover NSE Script

Uses a multicast query to discover devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for the...

wsdd-discover NSE Script

Retrieves and displays information from devices supporting the Web Services Dynamic Discovery WS-Discovery protocol. It also attempts to locate any published Windows Communication Framework WCF web services .NET 4.0 or later. Script Arguments max-newtargets, newtargets See the documentation for t...

CVE-2010-4218

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

CVE-2010-0786

The Web Services Security component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services aka JAX-WS, which allows remote attackers to cause a denial of service data corruption via a crafted JAX-WS request that leads to incorrect...

Code injection

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

CVE-2010-0786

The Web Services Security component in IBM WebSphere Application Server WAS 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services aka JAX-WS, which allows remote attackers to cause a denial of service data corruption via a crafted JAX-WS request that leads to incorrect...

CVE-2010-4218

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

CVE-2010-4218

Technical details about CVE-2010-4218 are not publicly provided in the supplied documents. No concrete affected versions, exploit information, or remediation are present. Monitor for updates from official advisories and vulnerability databases.

[SECURITY] Fedora 14 Update: php-nusoap-0.9.5-1.fc14

NuSOAP is a rewrite of SOAPx4, provided by NuSphere and Dietrich Ayala. It is a set of PHP classes - no PHP extensions required - that allow developers to create and consume web services based on SOAP 1.1, WSDL 1.1 and HTTP 1.0/1. 1...

[SECURITY] Fedora 13 Update: php-nusoap-0.9.5-1.fc13

NuSOAP is a rewrite of SOAPx4, provided by NuSphere and Dietrich Ayala. It is a set of PHP classes - no PHP extensions required - that allow developers to create and consume web services based on SOAP 1.1, WSDL 1.1 and HTTP 1.0/1. 1...

Apache Axis2 Detection (HTTP)

HTTP based detection of Apache Axis2, a Web Services / SOAP / WSDL engine, the successor to the widely used Apache Axis SOAP stack. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Report: More Than 1 Million Web Sites Serving Malware in Q2

Web anti malware firm Dasient has published data claiming that more than 1 million Web sites were compromised in the second quarter, 2010 – a sharp increase. More than one million Web domains were infected with malicious code in the second quarter of 2010 – around one percent of all active Web...

CVE-2010-3186

IBM WebSphere Application Server 7.x before 7.0.0.13 and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32 are affected when using a JAX-WS application; the WS-Security policy IncludeTimestamp setting is not handled correctly, with unspecified impact and remote a...

netStartEnterprise 4.0 SQL Injection

======================================= netStartEnterprise v4.0 SQL Injection Vulnerability ======================================= Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability Author: L1nK Mail: [email protected] Date: 07/23/2010 Tested on: Windows, Linux, Mac...

netStartEnterprise 4.0 - SQL Injection

======================================= netStartEnterprise v4.0 SQL Injection Vulnerability ======================================= Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability Author: L1nK Mail: [email protected] Date: 07/23/2010 Tested on: Windows, Linux, Mac...

Sports Accelerator Suite 2.0 SQL Injection

Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL Injection attack when input is...

Sports Accelerator Suite 2.0 - news_id SQL Injection

Sports Accelerator Suite 2.0 - newsid SQL Injection Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is...

Sports Accelerator Suite v2.0 (news_id) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== Sports Accelerator Suite v2.0 newsid SQL Injection Vulnerability =================================================================== Vendor: Athlete Web Services, Inc. / AWS...

Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability

Summary Content Management System PHP+MySQL. Description The CMS is vulnerable to an SQL Injection attack when input is passed to the "newsid" parameter. The script fails to properly sanitize the input before being returned to the user allowing the attacker to compromise the entire DB system and...

Sports Accelerator Suite 2.0 - 'news_id' SQL Injection

Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL Injection attack when input is...