Formpipe Lasernet 安全漏洞

Formpipe Lasernet is a document processing solution from the Danish company Formpipe. A security vulnerability exists in versions of Formpipe Lasernet prior to 9.13.3 that allows documents to be included in a client web service either through an authenticated attacker, or in a configuration that...

Resource Exhaustion in Spring Security

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service DoS attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker c...

Authorization

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service DoS attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker c...

Apache Olingo SSRF Attack Vulnerability

Apache Olingo is a U.S. Apache Apache Software Foundation for the implementation of Open Data Protocol OData, Open Data Protocol Java library. Apache Olingo SSRF attack vulnerability can be exploited by an attacker to trick a client into connecting to a malicious server, then the server can cause...

Web Help Desk by SolarWinds - Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: Web Help Desk by SolarWinds Version: 11.0.7 older versions may be affected Vendor Site: http://www.webhelpdesk.com Software Download: http://www.webhelpdesk.com/help-desk-software/ Discovered: August 18th 2012...

Pesca 0.75 Local Stealer - Download !

Pesca 0.75 Local Stealer - Download ! Steals: MSN Messenger Windows Messenger Windows Live Messenger Yahoo Messenger 5.x and 6.x Google Talk ICQ Lite 4.x/5.x/2003 AOL Instant Messenger v4.6,6.x,Pro Trillian Miranda GAIM/Pidgin MySpace IM PaltalkScene Outlook Express Microsoft Outlook 2000...

CVE-2005-3915

The Internet Key Exchange version 1 IKEv1 implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the...

CVE-2005-3915

The Internet Key Exchange version 1 IKEv1 implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the...