113 matches found
CVE-2014-0357
Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...
Design/Logic Flaw
Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...
CVE-2014-0357
Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...
CVE-2014-0357
Amtelco miSecureMessages (Server Release 6.2) suffers an authentication/authorization weakness that allows remote attackers to read arbitrary user messages by sending an XML request containing a valid license key and a modified contactID value. The root cause is insufficient authentication/sessio...
CVE-2014-0357: Improper Authentication
Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...
PT-2014-3586
Name of the Vulnerable Software and Affected Versions Amtelco miSecureMessages affected versions not specified Description The issue allows remote attackers to read the messages of arbitrary users by sending an XML request with a valid license key and a modified contactID value. This can be done...
Ruby On Rails XML Processor YAML Deserialization Code Execution
This Metasploit module exploits a remote code execution vulnerability in the XML request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the...
Novell File Reporter Agent XML Parser Buffer Overflow
Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...
Firefox XMLHttpRequest 302 response disclosure
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a...
phpRPC Library Remote Code Execution
GulfTech Security Research February 26, 2006 Vendor : Robert Hoffman URL : http://sourceforge.net/projects/phprpc/ Version : phpRPC = 0.7 Risk : Remote Code Execution Description: phpRPC is meant to be an easy to use xmlrpc library. phpRPC is greatly simplified with the use of database/rpc-protoc...
XML Request Possible userID / password Cleartext Remote Disclosure
Binary data 5214.prm...
